
<!DOCTYPE HTML>
<html lang="zh-hans" >
    <head>
        <meta charset="UTF-8">
        <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
        <title>Kuber Apiserver Flag · 这是程序员吗</title>
        <meta http-equiv="X-UA-Compatible" content="IE=edge" />
        <meta name="description" content="">
        <meta name="generator" content="GitBook 3.2.3">
        <meta name="author" content="xishengcai">
        
        
    
    
    <link rel="stylesheet" href="../../gitbook/style.css">

    
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-expandable-chapters/expandable-chapters.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-toggle-chapters/toggle.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-search-plus/search.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-disqus/plugin.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-prism/prism-base16-ateliersulphurpool.light.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-advanced-emoji/emoji-website.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-anchors/plugin.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-emphasize/plugin.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-katex/katex.min.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-splitter/splitter.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-mermaid-gb3/mermaid/mermaid.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-tbfed-pagefooter/footer.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-expandable-chapters-small/expandable-chapters-small.css">
                
            
                
                <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-sectionx/sectionx.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-donate/plugin.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-local-video/video-js.min.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-anchor-navigation-ex/style/plugin.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-terminal/plugin.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-alerts/style.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-versions-select/plugin.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-fontsettings/website.css">
                
            
                
                <link rel="stylesheet" href="../../gitbook/gitbook-plugin-theme-comscore/test.css">
                
            
        

    

    
        
    
        
    
        
    
        
    
        
    
        
    


    

        
    
    
    
    
    
    
    <meta name="HandheldFriendly" content="true"/>
    <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no">
    <meta name="apple-mobile-web-app-capable" content="yes">
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <link rel="apple-touch-icon-precomposed" sizes="152x152" href="../../gitbook/images/apple-touch-icon-precomposed-152.png">
    <link rel="shortcut icon" href="../../gitbook/images/favicon.ico" type="image/x-icon">

    
    <link rel="next" href="kubernetes-client.html" />
    
    

    
    <link rel="stylesheet" href="../../gitbook/gitbook-plugin-chart/c3/c3.min.css">
    <script src="../../gitbook/gitbook-plugin-chart/c3/d3.min.js"></script>
    <script src="../../gitbook/gitbook-plugin-chart/c3/c3.min.js"></script>
    

    <script src="../../gitbook/gitbook-plugin-graph/d3.min.js"></script>
    <script src="../../gitbook/gitbook-plugin-graph/function-plot.js"></script>    

    
        <link rel="shortcut icon" href='../../favicon.ico' type="image/x-icon">
    
    
        <link rel="bookmark" href='../../favicon.ico' type="image/x-icon">
    
    
    

    <style>
    @media only screen and (max-width: 640px) {
        .book-header .hidden-mobile {
            display: none;
        }
    }
    </style>
    <script>
        window["gitbook-plugin-github-buttons"] = {"repo":"xishengcai/xisheng.blog","types":["star"],"size":"small"};
    </script>

    </head>
    <body>
        
<div class="book">
    <div class="book-summary">
        
            
<div id="book-search-input" role="search">
    <input type="text" placeholder="输入并搜索" />
</div>

            
                <nav role="navigation">
                


<ul class="summary">
    
    
    
        
        <li>
            <a href="https://xisheng.vip" target="_blank" class="custom-link">Home</a>
        </li>
    
    

    
    <li class="divider"></li>
    

    
        
        <li class="header">Blog</li>
        
        
    
        <li class="chapter " data-level="1.1" data-path="../../">
            
                <a href="../../">
            
                    
                        <b>1.1.</b>
                    
                    Introduction
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.2" data-path="../algorithm/">
            
                <a href="../algorithm/">
            
                    
                        <b>1.2.</b>
                    
                    Algorithm
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.2.1" data-path="../algorithm/heap.html">
            
                <a href="../algorithm/heap.html">
            
                    
                        <b>1.2.1.</b>
                    
                    Heap
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.2.2" data-path="../algorithm/readme.html">
            
                <a href="../algorithm/readme.html">
            
                    
                        <b>1.2.2.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.3" data-path="../angular/">
            
                <a href="../angular/">
            
                    
                        <b>1.3.</b>
                    
                    Angular
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.3.1" data-path="../angular/1-start.html">
            
                <a href="../angular/1-start.html">
            
                    
                        <b>1.3.1.</b>
                    
                    Start
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.3.2" data-path="../angular/2-component.html">
            
                <a href="../angular/2-component.html">
            
                    
                        <b>1.3.2.</b>
                    
                    Component
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.3.3" data-path="../angular/3-form.html">
            
                <a href="../angular/3-form.html">
            
                    
                        <b>1.3.3.</b>
                    
                    Form
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.3.4" data-path="../angular/readme.html">
            
                <a href="../angular/readme.html">
            
                    
                        <b>1.3.4.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.4" data-path="../database/">
            
                <a href="../database/">
            
                    
                        <b>1.4.</b>
                    
                    Database
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.4.1" data-path="../database/mongodb.html">
            
                <a href="../database/mongodb.html">
            
                    
                        <b>1.4.1.</b>
                    
                    Mongodb
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.4.2" data-path="../database/readme.html">
            
                <a href="../database/readme.html">
            
                    
                        <b>1.4.2.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.5" data-path="../docker/">
            
                <a href="../docker/">
            
                    
                        <b>1.5.</b>
                    
                    Docker
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.5.1" data-path="../docker/CentOS.html">
            
                <a href="../docker/CentOS.html">
            
                    
                        <b>1.5.1.</b>
                    
                    CentOS
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.5.2" data-path="../docker/install.html">
            
                <a href="../docker/install.html">
            
                    
                        <b>1.5.2.</b>
                    
                    Install
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.5.3" data-path="../docker/readme.html">
            
                <a href="../docker/readme.html">
            
                    
                        <b>1.5.3.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.5.4" data-path="../docker/官方shell.html">
            
                <a href="../docker/官方shell.html">
            
                    
                        <b>1.5.4.</b>
                    
                    官方Shell
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.6" data-path="../golang/">
            
                <a href="../golang/">
            
                    
                        <b>1.6.</b>
                    
                    Golang
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.6.1" data-path="../golang/aop.html">
            
                <a href="../golang/aop.html">
            
                    
                        <b>1.6.1.</b>
                    
                    Aop
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.6.2" data-path="../golang/base/">
            
                <a href="../golang/base/">
            
                    
                        <b>1.6.2.</b>
                    
                    Base
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.6.2.1" data-path="../golang/base/copy.html">
            
                <a href="../golang/base/copy.html">
            
                    
                        <b>1.6.2.1.</b>
                    
                    Copy
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.6.2.2" data-path="../golang/base/new_and_make.html">
            
                <a href="../golang/base/new_and_make.html">
            
                    
                        <b>1.6.2.2.</b>
                    
                    New And Make
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.6.2.3" data-path="../golang/base/readme.html">
            
                <a href="../golang/base/readme.html">
            
                    
                        <b>1.6.2.3.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.6.2.4" data-path="../golang/base/reflect.html">
            
                <a href="../golang/base/reflect.html">
            
                    
                        <b>1.6.2.4.</b>
                    
                    Reflect
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.6.2.5" data-path="../golang/base/string.html">
            
                <a href="../golang/base/string.html">
            
                    
                        <b>1.6.2.5.</b>
                    
                    String
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.6.2.6" data-path="../golang/base/tag.html">
            
                <a href="../golang/base/tag.html">
            
                    
                        <b>1.6.2.6.</b>
                    
                    Tag
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.6.3" data-path="../golang/clouser.html">
            
                <a href="../golang/clouser.html">
            
                    
                        <b>1.6.3.</b>
                    
                    Clouser
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.6.4" data-path="../golang/err 优雅处理.html">
            
                <a href="../golang/err 优雅处理.html">
            
                    
                        <b>1.6.4.</b>
                    
                    Err 优雅处理
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.6.5" data-path="../golang/go module 2.html">
            
                <a href="../golang/go module 2.html">
            
                    
                        <b>1.6.5.</b>
                    
                    Go Module 2
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.6.6" data-path="../golang/go_mod.html">
            
                <a href="../golang/go_mod.html">
            
                    
                        <b>1.6.6.</b>
                    
                    Go Mod
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.6.7" data-path="../golang/gocraftwork.html">
            
                <a href="../golang/gocraftwork.html">
            
                    
                        <b>1.6.7.</b>
                    
                    Gocraftwork
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.6.8" data-path="../golang/oauth.html">
            
                <a href="../golang/oauth.html">
            
                    
                        <b>1.6.8.</b>
                    
                    Oauth
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.6.9" data-path="../golang/readme.html">
            
                <a href="../golang/readme.html">
            
                    
                        <b>1.6.9.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.6.10" data-path="../golang/swagger.html">
            
                <a href="../golang/swagger.html">
            
                    
                        <b>1.6.10.</b>
                    
                    Swagger
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.6.11" data-path="../golang/tls.html">
            
                <a href="../golang/tls.html">
            
                    
                        <b>1.6.11.</b>
                    
                    Tls
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.6.12" >
            
                <span>
            
                    
                        <b>1.6.12.</b>
                    
                    代码走读
            
                </span>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.6.12.1" data-path="../golang/代码走读/2020.5.26.html">
            
                <a href="../golang/代码走读/2020.5.26.html">
            
                    
                        <b>1.6.12.1.</b>
                    
                    2020.5.26
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.6.13" data-path="../golang/任务队列/">
            
                <a href="../golang/任务队列/">
            
                    
                        <b>1.6.13.</b>
                    
                    任务队列
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.6.13.1" data-path="../golang/任务队列/gocraft-worker.html">
            
                <a href="../golang/任务队列/gocraft-worker.html">
            
                    
                        <b>1.6.13.1.</b>
                    
                    Gocraft Worker
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.6.13.2" data-path="../golang/任务队列/readme.html">
            
                <a href="../golang/任务队列/readme.html">
            
                    
                        <b>1.6.13.2.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.6.14" data-path="../golang/参数校验.html">
            
                <a href="../golang/参数校验.html">
            
                    
                        <b>1.6.14.</b>
                    
                    参数校验
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.7" data-path="../istio/">
            
                <a href="../istio/">
            
                    
                        <b>1.7.</b>
                    
                    Istio
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.7.1" data-path="../istio/readme.html">
            
                <a href="../istio/readme.html">
            
                    
                        <b>1.7.1.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.7.2" data-path="../istio/virtualservice.html">
            
                <a href="../istio/virtualservice.html">
            
                    
                        <b>1.7.2.</b>
                    
                    Virtualservice
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.8" >
            
                <span>
            
                    
                        <b>1.8.</b>
                    
                    Java
            
                </span>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.8.1" data-path="../java/jvm.html">
            
                <a href="../java/jvm.html">
            
                    
                        <b>1.8.1.</b>
                    
                    Jvm
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.8.2" data-path="../java/typescript.html">
            
                <a href="../java/typescript.html">
            
                    
                        <b>1.8.2.</b>
                    
                    Typescript
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.9" data-path="./">
            
                <a href="./">
            
                    
                        <b>1.9.</b>
                    
                    Kubernetes
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.9.1" data-path="APIService.html">
            
                <a href="APIService.html">
            
                    
                        <b>1.9.1.</b>
                    
                    APIService
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.2" data-path="CAK.html">
            
                <a href="CAK.html">
            
                    
                        <b>1.9.2.</b>
                    
                    CAK
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.3" data-path="Deployment 的实现原理.html">
            
                <a href="Deployment 的实现原理.html">
            
                    
                        <b>1.9.3.</b>
                    
                    Deployment 的实现原理
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.4" data-path="K8s源码/">
            
                <a href="K8s源码/">
            
                    
                        <b>1.9.4.</b>
                    
                    K8s源码
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.9.4.1" data-path="K8s源码/calico 源码分析.html">
            
                <a href="K8s源码/calico 源码分析.html">
            
                    
                        <b>1.9.4.1.</b>
                    
                    Calico 源码分析
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.4.2" data-path="K8s源码/garbage collector controller 源码分析.html">
            
                <a href="K8s源码/garbage collector controller 源码分析.html">
            
                    
                        <b>1.9.4.2.</b>
                    
                    Garbage Collector Controller 源码分析
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.4.3" data-path="K8s源码/job.html">
            
                <a href="K8s源码/job.html">
            
                    
                        <b>1.9.4.3.</b>
                    
                    Job
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.4.4" data-path="K8s源码/kube-proxy-iptables.html">
            
                <a href="K8s源码/kube-proxy-iptables.html">
            
                    
                        <b>1.9.4.4.</b>
                    
                    Kube Proxy Iptables
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.4.5" data-path="K8s源码/kube-proxy-ipvs.html">
            
                <a href="K8s源码/kube-proxy-ipvs.html">
            
                    
                        <b>1.9.4.5.</b>
                    
                    Kube Proxy Ipvs
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.4.6" data-path="K8s源码/kube-proxy.html">
            
                <a href="K8s源码/kube-proxy.html">
            
                    
                        <b>1.9.4.6.</b>
                    
                    Kube Proxy
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.4.7" data-path="K8s源码/kubectl-exec.html">
            
                <a href="K8s源码/kubectl-exec.html">
            
                    
                        <b>1.9.4.7.</b>
                    
                    Kubectl Exec
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.4.8" data-path="K8s源码/kubectl源码阅读1.html">
            
                <a href="K8s源码/kubectl源码阅读1.html">
            
                    
                        <b>1.9.4.8.</b>
                    
                    Kubectl源码阅读1
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.4.9" data-path="K8s源码/kubectl源码阅读2.html">
            
                <a href="K8s源码/kubectl源码阅读2.html">
            
                    
                        <b>1.9.4.9.</b>
                    
                    Kubectl源码阅读2
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.4.10" data-path="K8s源码/readme.html">
            
                <a href="K8s源码/readme.html">
            
                    
                        <b>1.9.4.10.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.4.11" data-path="K8s源码/schedule.html">
            
                <a href="K8s源码/schedule.html">
            
                    
                        <b>1.9.4.11.</b>
                    
                    Schedule
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.4.12" data-path="K8s源码/scheme.html">
            
                <a href="K8s源码/scheme.html">
            
                    
                        <b>1.9.4.12.</b>
                    
                    Scheme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.4.13" data-path="K8s源码/调度队列.html">
            
                <a href="K8s源码/调度队列.html">
            
                    
                        <b>1.9.4.13.</b>
                    
                    调度队列
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.9.5" data-path="Karmada.html">
            
                <a href="Karmada.html">
            
                    
                        <b>1.9.5.</b>
                    
                    Karmada
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.6" data-path="Pixie.html">
            
                <a href="Pixie.html">
            
                    
                        <b>1.9.6.</b>
                    
                    Pixie
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.7" data-path="admission access.html">
            
                <a href="admission access.html">
            
                    
                        <b>1.9.7.</b>
                    
                    Admission Access
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.8" data-path="ccm.html">
            
                <a href="ccm.html">
            
                    
                        <b>1.9.8.</b>
                    
                    Ccm
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.9" data-path="client-go.html">
            
                <a href="client-go.html">
            
                    
                        <b>1.9.9.</b>
                    
                    Client Go
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.10" data-path="command.html">
            
                <a href="command.html">
            
                    
                        <b>1.9.10.</b>
                    
                    Command
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.11" data-path="controller.html">
            
                <a href="controller.html">
            
                    
                        <b>1.9.11.</b>
                    
                    Controller
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.12" data-path="copy docker config.html">
            
                <a href="copy docker config.html">
            
                    
                        <b>1.9.12.</b>
                    
                    Copy Docker Config
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.13" data-path="etcd-operation.html">
            
                <a href="etcd-operation.html">
            
                    
                        <b>1.9.13.</b>
                    
                    Etcd Operation
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.14" data-path="gc.html">
            
                <a href="gc.html">
            
                    
                        <b>1.9.14.</b>
                    
                    Gc
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.15" data-path="helm chart.html">
            
                <a href="helm chart.html">
            
                    
                        <b>1.9.15.</b>
                    
                    Helm Chart
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.16" data-path="helm.html">
            
                <a href="helm.html">
            
                    
                        <b>1.9.16.</b>
                    
                    Helm
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.17" >
            
                <span>
            
                    
                        <b>1.9.17.</b>
                    
                    Helm
            
                </span>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.9.17.1" data-path="helm/charts.html">
            
                <a href="helm/charts.html">
            
                    
                        <b>1.9.17.1.</b>
                    
                    Charts
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.17.2" data-path="helm/helm 钩子函数.html">
            
                <a href="helm/helm 钩子函数.html">
            
                    
                        <b>1.9.17.2.</b>
                    
                    Helm 钩子函数
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.17.3" data-path="helm/helm-operator.html">
            
                <a href="helm/helm-operator.html">
            
                    
                        <b>1.9.17.3.</b>
                    
                    Helm Operator
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.17.4" data-path="helm/文档查询.html">
            
                <a href="helm/文档查询.html">
            
                    
                        <b>1.9.17.4.</b>
                    
                    文档查询
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.17.5" data-path="helm/语法.html">
            
                <a href="helm/语法.html">
            
                    
                        <b>1.9.17.5.</b>
                    
                    语法
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.9.18" data-path="install.html">
            
                <a href="install.html">
            
                    
                        <b>1.9.18.</b>
                    
                    Install
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.19" data-path="istio-inject.html">
            
                <a href="istio-inject.html">
            
                    
                        <b>1.9.19.</b>
                    
                    Istio Inject
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.20" >
            
                <span>
            
                    
                        <b>1.9.20.</b>
                    
                    KubeEdge
            
                </span>
            

            
        </li>
    
        <li class="chapter active" data-level="1.9.21" data-path="kuber-apiserver-flag.html">
            
                <a href="kuber-apiserver-flag.html">
            
                    
                        <b>1.9.21.</b>
                    
                    Kuber Apiserver Flag
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.22" data-path="kubernetes-client.html">
            
                <a href="kubernetes-client.html">
            
                    
                        <b>1.9.22.</b>
                    
                    Kubernetes Client
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.23" data-path="kubernetes灾备.html">
            
                <a href="kubernetes灾备.html">
            
                    
                        <b>1.9.23.</b>
                    
                    Kubernetes灾备
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.24" data-path="kubesphere/">
            
                <a href="kubesphere/">
            
                    
                        <b>1.9.24.</b>
                    
                    Kubesphere
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.9.24.1" data-path="kubesphere/helm.html">
            
                <a href="kubesphere/helm.html">
            
                    
                        <b>1.9.24.1.</b>
                    
                    Helm
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.24.2" data-path="kubesphere/readme.html">
            
                <a href="kubesphere/readme.html">
            
                    
                        <b>1.9.24.2.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.9.25" data-path="kubevela/">
            
                <a href="kubevela/">
            
                    
                        <b>1.9.25.</b>
                    
                    Kubevela
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.9.25.1" data-path="kubevela/KubeVela 功能.html">
            
                <a href="kubevela/KubeVela 功能.html">
            
                    
                        <b>1.9.25.1.</b>
                    
                    KubeVela 功能
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.25.2" data-path="kubevela/cue.html">
            
                <a href="kubevela/cue.html">
            
                    
                        <b>1.9.25.2.</b>
                    
                    Cue
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.25.3" data-path="kubevela/oam.html">
            
                <a href="kubevela/oam.html">
            
                    
                        <b>1.9.25.3.</b>
                    
                    Oam
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.25.4" data-path="kubevela/readme.html">
            
                <a href="kubevela/readme.html">
            
                    
                        <b>1.9.25.4.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.25.5" data-path="kubevela/rollout design.html">
            
                <a href="kubevela/rollout design.html">
            
                    
                        <b>1.9.25.5.</b>
                    
                    Rollout Design
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.25.6" data-path="kubevela/vela run.html">
            
                <a href="kubevela/vela run.html">
            
                    
                        <b>1.9.25.6.</b>
                    
                    Vela Run
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.25.7" data-path="kubevela/vela up.html">
            
                <a href="kubevela/vela up.html">
            
                    
                        <b>1.9.25.7.</b>
                    
                    Vela Up
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.25.8" data-path="kubevela/vela-cluster.html">
            
                <a href="kubevela/vela-cluster.html">
            
                    
                        <b>1.9.25.8.</b>
                    
                    Vela Cluster
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.25.9" data-path="kubevela/vela-helm.html">
            
                <a href="kubevela/vela-helm.html">
            
                    
                        <b>1.9.25.9.</b>
                    
                    Vela Helm
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.25.10" data-path="kubevela/vela-pk-oam.html">
            
                <a href="kubevela/vela-pk-oam.html">
            
                    
                        <b>1.9.25.10.</b>
                    
                    Vela Pk Oam
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.9.26" data-path="mk-cert.html">
            
                <a href="mk-cert.html">
            
                    
                        <b>1.9.26.</b>
                    
                    Mk Cert
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.27" data-path="open_swagger-ui.html">
            
                <a href="open_swagger-ui.html">
            
                    
                        <b>1.9.27.</b>
                    
                    Open Swagger Ui
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.28" data-path="readme.html">
            
                <a href="readme.html">
            
                    
                        <b>1.9.28.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.29" data-path="task/">
            
                <a href="task/">
            
                    
                        <b>1.9.29.</b>
                    
                    Task
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.9.29.1" data-path="task/HPA.html">
            
                <a href="task/HPA.html">
            
                    
                        <b>1.9.29.1.</b>
                    
                    HPA
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.29.2" data-path="task/kubectl patch.html">
            
                <a href="task/kubectl patch.html">
            
                    
                        <b>1.9.29.2.</b>
                    
                    Kubectl Patch
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.29.3" data-path="task/pod 信息注入.html">
            
                <a href="task/pod 信息注入.html">
            
                    
                        <b>1.9.29.3.</b>
                    
                    Pod 信息注入
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.29.4" data-path="task/pod 垂直扩缩容.html">
            
                <a href="task/pod 垂直扩缩容.html">
            
                    
                        <b>1.9.29.4.</b>
                    
                    Pod 垂直扩缩容
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.29.5" data-path="task/readme.html">
            
                <a href="task/readme.html">
            
                    
                        <b>1.9.29.5.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.29.6" data-path="task/server-side-apply.html">
            
                <a href="task/server-side-apply.html">
            
                    
                        <b>1.9.29.6.</b>
                    
                    Server Side Apply
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.29.7" data-path="task/准入控制.html">
            
                <a href="task/准入控制.html">
            
                    
                        <b>1.9.29.7.</b>
                    
                    准入控制
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.29.8" data-path="task/聚合api.html">
            
                <a href="task/聚合api.html">
            
                    
                        <b>1.9.29.8.</b>
                    
                    聚合Api
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.29.9" data-path="task/资源预留配置.html">
            
                <a href="task/资源预留配置.html">
            
                    
                        <b>1.9.29.9.</b>
                    
                    资源预留配置
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.9.30" data-path="webhook.html">
            
                <a href="webhook.html">
            
                    
                        <b>1.9.30.</b>
                    
                    Webhook
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.31" data-path="一致性认证.html">
            
                <a href="一致性认证.html">
            
                    
                        <b>1.9.31.</b>
                    
                    一致性认证
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.32" data-path="专利名词.html">
            
                <a href="专利名词.html">
            
                    
                        <b>1.9.32.</b>
                    
                    专利名词
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.33" data-path="删除namespace.html">
            
                <a href="删除namespace.html">
            
                    
                        <b>1.9.33.</b>
                    
                    删除Namespace
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.34" data-path="简化多集群.html">
            
                <a href="简化多集群.html">
            
                    
                        <b>1.9.34.</b>
                    
                    简化多集群
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.35" data-path="网络插件/">
            
                <a href="网络插件/">
            
                    
                        <b>1.9.35.</b>
                    
                    网络插件
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.9.35.1" data-path="网络插件/calico.html">
            
                <a href="网络插件/calico.html">
            
                    
                        <b>1.9.35.1.</b>
                    
                    Calico
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.35.2" data-path="网络插件/cilium.html">
            
                <a href="网络插件/cilium.html">
            
                    
                        <b>1.9.35.2.</b>
                    
                    Cilium
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.35.3" data-path="网络插件/ebpf.html">
            
                <a href="网络插件/ebpf.html">
            
                    
                        <b>1.9.35.3.</b>
                    
                    Ebpf
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.35.4" data-path="网络插件/readme.html">
            
                <a href="网络插件/readme.html">
            
                    
                        <b>1.9.35.4.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.9.36" data-path="镜像/">
            
                <a href="镜像/">
            
                    
                        <b>1.9.36.</b>
                    
                    镜像
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.9.36.1" data-path="镜像/Containerd Stargz Snapshotter.html">
            
                <a href="镜像/Containerd Stargz Snapshotter.html">
            
                    
                        <b>1.9.36.1.</b>
                    
                    Containerd Stargz Snapshotter
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.36.2" data-path="镜像/OCI.html">
            
                <a href="镜像/OCI.html">
            
                    
                        <b>1.9.36.2.</b>
                    
                    OCI
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.36.3" data-path="镜像/harbor/">
            
                <a href="镜像/harbor/">
            
                    
                        <b>1.9.36.3.</b>
                    
                    Harbor
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.9.36.3.1" data-path="镜像/harbor/readme.html">
            
                <a href="镜像/harbor/readme.html">
            
                    
                        <b>1.9.36.3.1.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.9.36.4" data-path="镜像/readme.html">
            
                <a href="镜像/readme.html">
            
                    
                        <b>1.9.36.4.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.36.5" data-path="镜像/自动构建镜像.html">
            
                <a href="镜像/自动构建镜像.html">
            
                    
                        <b>1.9.36.5.</b>
                    
                    自动构建镜像
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.36.6" data-path="镜像/镜像加速方案.html">
            
                <a href="镜像/镜像加速方案.html">
            
                    
                        <b>1.9.36.6.</b>
                    
                    镜像加速方案
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.9.36.7" data-path="镜像/镜像延迟加载技术解析.html">
            
                <a href="镜像/镜像延迟加载技术解析.html">
            
                    
                        <b>1.9.36.7.</b>
                    
                    镜像延迟加载技术解析
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.10" data-path="../math/">
            
                <a href="../math/">
            
                    
                        <b>1.10.</b>
                    
                    Math
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.10.1" data-path="../math/readme.html">
            
                <a href="../math/readme.html">
            
                    
                        <b>1.10.1.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.10.2" data-path="../math/泊松分布.html">
            
                <a href="../math/泊松分布.html">
            
                    
                        <b>1.10.2.</b>
                    
                    泊松分布
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.11" data-path="../效率/">
            
                <a href="../效率/">
            
                    
                        <b>1.11.</b>
                    
                    效率
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.11.1" data-path="../效率/cat.html">
            
                <a href="../效率/cat.html">
            
                    
                        <b>1.11.1.</b>
                    
                    Cat
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.2" data-path="../效率/docker volume clean.html">
            
                <a href="../效率/docker volume clean.html">
            
                    
                        <b>1.11.2.</b>
                    
                    Docker Volume Clean
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.3" data-path="../效率/git book.html">
            
                <a href="../效率/git book.html">
            
                    
                        <b>1.11.3.</b>
                    
                    Git Book
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.4" data-path="../效率/git.html">
            
                <a href="../效率/git.html">
            
                    
                        <b>1.11.4.</b>
                    
                    Git
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.5" data-path="../效率/linux command.html">
            
                <a href="../效率/linux command.html">
            
                    
                        <b>1.11.5.</b>
                    
                    Linux Command
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.6" data-path="../效率/linux 内核.html">
            
                <a href="../效率/linux 内核.html">
            
                    
                        <b>1.11.6.</b>
                    
                    Linux 内核
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.7" data-path="../效率/macos path.html">
            
                <a href="../效率/macos path.html">
            
                    
                        <b>1.11.7.</b>
                    
                    Macos Path
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.8" data-path="../效率/nfs.html">
            
                <a href="../效率/nfs.html">
            
                    
                        <b>1.11.8.</b>
                    
                    Nfs
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.9" data-path="../效率/nginx.html">
            
                <a href="../效率/nginx.html">
            
                    
                        <b>1.11.9.</b>
                    
                    Nginx
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.10" data-path="../效率/nginx2.html">
            
                <a href="../效率/nginx2.html">
            
                    
                        <b>1.11.10.</b>
                    
                    Nginx2
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.11" data-path="../效率/oauth2.html">
            
                <a href="../效率/oauth2.html">
            
                    
                        <b>1.11.11.</b>
                    
                    Oauth2
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.12" data-path="../效率/ovftool.html">
            
                <a href="../效率/ovftool.html">
            
                    
                        <b>1.11.12.</b>
                    
                    Ovftool
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.13" data-path="../效率/readme.html">
            
                <a href="../效率/readme.html">
            
                    
                        <b>1.11.13.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.14" data-path="../效率/sed.html">
            
                <a href="../效率/sed.html">
            
                    
                        <b>1.11.14.</b>
                    
                    Sed
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.15" data-path="../效率/shell_judge.html">
            
                <a href="../效率/shell_judge.html">
            
                    
                        <b>1.11.15.</b>
                    
                    Shell Judge
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.16" data-path="../效率/sshpass.html">
            
                <a href="../效率/sshpass.html">
            
                    
                        <b>1.11.16.</b>
                    
                    Sshpass
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.17" data-path="../效率/telepresence.html">
            
                <a href="../效率/telepresence.html">
            
                    
                        <b>1.11.17.</b>
                    
                    Telepresence
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.18" data-path="../效率/typora.html">
            
                <a href="../效率/typora.html">
            
                    
                        <b>1.11.18.</b>
                    
                    Typora
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.19" data-path="../效率/url encode.html">
            
                <a href="../效率/url encode.html">
            
                    
                        <b>1.11.19.</b>
                    
                    Url Encode
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.20" data-path="../效率/vim.html">
            
                <a href="../效率/vim.html">
            
                    
                        <b>1.11.20.</b>
                    
                    Vim
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.21" data-path="../效率/yum.html">
            
                <a href="../效率/yum.html">
            
                    
                        <b>1.11.21.</b>
                    
                    Yum
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.22" data-path="../效率/内网穿透.html">
            
                <a href="../效率/内网穿透.html">
            
                    
                        <b>1.11.22.</b>
                    
                    内网穿透
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.23" data-path="../效率/科学上网.html">
            
                <a href="../效率/科学上网.html">
            
                    
                        <b>1.11.23.</b>
                    
                    科学上网
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.11.24" data-path="../效率/证书制作.html">
            
                <a href="../效率/证书制作.html">
            
                    
                        <b>1.11.24.</b>
                    
                    证书制作
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.12" >
            
                <span>
            
                    
                        <b>1.12.</b>
                    
                    杂谈
            
                </span>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.12.1" data-path="../杂谈/论好文章和烂文章.html">
            
                <a href="../杂谈/论好文章和烂文章.html">
            
                    
                        <b>1.12.1.</b>
                    
                    论好文章和烂文章
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.13" data-path="../测试/">
            
                <a href="../测试/">
            
                    
                        <b>1.13.</b>
                    
                    测试
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.13.1" data-path="../测试/ginkgo/">
            
                <a href="../测试/ginkgo/">
            
                    
                        <b>1.13.1.</b>
                    
                    Ginkgo
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.13.1.1" data-path="../测试/ginkgo/ginkgo.html">
            
                <a href="../测试/ginkgo/ginkgo.html">
            
                    
                        <b>1.13.1.1.</b>
                    
                    Ginkgo
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.13.1.2" data-path="../测试/ginkgo/ginkgo_cmd.html">
            
                <a href="../测试/ginkgo/ginkgo_cmd.html">
            
                    
                        <b>1.13.1.2.</b>
                    
                    Ginkgo Cmd
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.13.1.3" data-path="../测试/ginkgo/readme.html">
            
                <a href="../测试/ginkgo/readme.html">
            
                    
                        <b>1.13.1.3.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.13.2" data-path="../测试/golang-test.html">
            
                <a href="../测试/golang-test.html">
            
                    
                        <b>1.13.2.</b>
                    
                    Golang Test
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.13.3" data-path="../测试/http测试.html">
            
                <a href="../测试/http测试.html">
            
                    
                        <b>1.13.3.</b>
                    
                    Http测试
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.13.4" data-path="../测试/readme.html">
            
                <a href="../测试/readme.html">
            
                    
                        <b>1.13.4.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.13.5" data-path="../测试/其他功能.html">
            
                <a href="../测试/其他功能.html">
            
                    
                        <b>1.13.5.</b>
                    
                    其他功能
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.13.6" data-path="../测试/单元测试.html">
            
                <a href="../测试/单元测试.html">
            
                    
                        <b>1.13.6.</b>
                    
                    单元测试
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.13.7" data-path="../测试/单元测试2.html">
            
                <a href="../测试/单元测试2.html">
            
                    
                        <b>1.13.7.</b>
                    
                    单元测试2
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.13.8" data-path="../测试/基准测试.html">
            
                <a href="../测试/基准测试.html">
            
                    
                        <b>1.13.8.</b>
                    
                    基准测试
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.13.9" data-path="../测试/子测试与子基准测试.html">
            
                <a href="../测试/子测试与子基准测试.html">
            
                    
                        <b>1.13.9.</b>
                    
                    子测试与子基准测试
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.13.10" data-path="../测试/并行测试.html">
            
                <a href="../测试/并行测试.html">
            
                    
                        <b>1.13.10.</b>
                    
                    并行测试
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.13.11" data-path="../测试/质量检查/">
            
                <a href="../测试/质量检查/">
            
                    
                        <b>1.13.11.</b>
                    
                    质量检查
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.13.11.1" data-path="../测试/质量检查/Sonar.html">
            
                <a href="../测试/质量检查/Sonar.html">
            
                    
                        <b>1.13.11.1.</b>
                    
                    Sonar
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.13.11.2" data-path="../测试/质量检查/go_lint.html">
            
                <a href="../测试/质量检查/go_lint.html">
            
                    
                        <b>1.13.11.2.</b>
                    
                    Go Lint
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.13.11.3" data-path="../测试/质量检查/readme.html">
            
                <a href="../测试/质量检查/readme.html">
            
                    
                        <b>1.13.11.3.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.14" data-path="../规范/">
            
                <a href="../规范/">
            
                    
                        <b>1.14.</b>
                    
                    规范
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.14.1" data-path="../规范/CodeReviewComments.html">
            
                <a href="../规范/CodeReviewComments.html">
            
                    
                        <b>1.14.1.</b>
                    
                    CodeReviewComments
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.14.2" data-path="../规范/git规范.html">
            
                <a href="../规范/git规范.html">
            
                    
                        <b>1.14.2.</b>
                    
                    Git规范
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.14.3" data-path="../规范/golang 代码规范.html">
            
                <a href="../规范/golang 代码规范.html">
            
                    
                        <b>1.14.3.</b>
                    
                    Golang 代码规范
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.14.4" data-path="../规范/readme.html">
            
                <a href="../规范/readme.html">
            
                    
                        <b>1.14.4.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.14.5" data-path="../规范/代码走读.html">
            
                <a href="../规范/代码走读.html">
            
                    
                        <b>1.14.5.</b>
                    
                    代码走读
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.15" data-path="../设计模式/">
            
                <a href="../设计模式/">
            
                    
                        <b>1.15.</b>
                    
                    设计模式
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.15.1" data-path="../设计模式/readme.html">
            
                <a href="../设计模式/readme.html">
            
                    
                        <b>1.15.1.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.2" data-path="../设计模式/创建模型/">
            
                <a href="../设计模式/创建模型/">
            
                    
                        <b>1.15.2.</b>
                    
                    创建模型
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.15.2.1" data-path="../设计模式/创建模型/readme.html">
            
                <a href="../设计模式/创建模型/readme.html">
            
                    
                        <b>1.15.2.1.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.2.2" data-path="../设计模式/创建模型/创建者模型.html">
            
                <a href="../设计模式/创建模型/创建者模型.html">
            
                    
                        <b>1.15.2.2.</b>
                    
                    创建者模型
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.2.3" data-path="../设计模式/创建模型/单例模式.html">
            
                <a href="../设计模式/创建模型/单例模式.html">
            
                    
                        <b>1.15.2.3.</b>
                    
                    单例模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.2.4" data-path="../设计模式/创建模型/原型模式.html">
            
                <a href="../设计模式/创建模型/原型模式.html">
            
                    
                        <b>1.15.2.4.</b>
                    
                    原型模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.2.5" data-path="../设计模式/创建模型/工厂方法.html">
            
                <a href="../设计模式/创建模型/工厂方法.html">
            
                    
                        <b>1.15.2.5.</b>
                    
                    工厂方法
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.2.6" data-path="../设计模式/创建模型/抽象工厂.html">
            
                <a href="../设计模式/创建模型/抽象工厂.html">
            
                    
                        <b>1.15.2.6.</b>
                    
                    抽象工厂
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.2.7" data-path="../设计模式/创建模型/简单工厂.html">
            
                <a href="../设计模式/创建模型/简单工厂.html">
            
                    
                        <b>1.15.2.7.</b>
                    
                    简单工厂
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.15.3" data-path="../设计模式/结构型模型/">
            
                <a href="../设计模式/结构型模型/">
            
                    
                        <b>1.15.3.</b>
                    
                    结构型模型
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.15.3.1" data-path="../设计模式/结构型模型/readme.html">
            
                <a href="../设计模式/结构型模型/readme.html">
            
                    
                        <b>1.15.3.1.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.3.2" data-path="../设计模式/结构型模型/享元模式.html">
            
                <a href="../设计模式/结构型模型/享元模式.html">
            
                    
                        <b>1.15.3.2.</b>
                    
                    享元模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.3.3" data-path="../设计模式/结构型模型/代理模式.html">
            
                <a href="../设计模式/结构型模型/代理模式.html">
            
                    
                        <b>1.15.3.3.</b>
                    
                    代理模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.3.4" data-path="../设计模式/结构型模型/外观模式.html">
            
                <a href="../设计模式/结构型模型/外观模式.html">
            
                    
                        <b>1.15.3.4.</b>
                    
                    外观模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.3.5" data-path="../设计模式/结构型模型/桥模式.html">
            
                <a href="../设计模式/结构型模型/桥模式.html">
            
                    
                        <b>1.15.3.5.</b>
                    
                    桥模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.3.6" data-path="../设计模式/结构型模型/组合模式.html">
            
                <a href="../设计模式/结构型模型/组合模式.html">
            
                    
                        <b>1.15.3.6.</b>
                    
                    组合模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.3.7" data-path="../设计模式/结构型模型/装饰模式.html">
            
                <a href="../设计模式/结构型模型/装饰模式.html">
            
                    
                        <b>1.15.3.7.</b>
                    
                    装饰模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.3.8" data-path="../设计模式/结构型模型/适配器模式.html">
            
                <a href="../设计模式/结构型模型/适配器模式.html">
            
                    
                        <b>1.15.3.8.</b>
                    
                    适配器模式
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    
        <li class="chapter " data-level="1.15.4" data-path="../设计模式/行为型模型/">
            
                <a href="../设计模式/行为型模型/">
            
                    
                        <b>1.15.4.</b>
                    
                    行为型模型
            
                </a>
            

            
            <ul class="articles">
                
    
        <li class="chapter " data-level="1.15.4.1" data-path="../设计模式/行为型模型/readme.html">
            
                <a href="../设计模式/行为型模型/readme.html">
            
                    
                        <b>1.15.4.1.</b>
                    
                    Readme
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.4.2" data-path="../设计模式/行为型模型/中介者模式.html">
            
                <a href="../设计模式/行为型模型/中介者模式.html">
            
                    
                        <b>1.15.4.2.</b>
                    
                    中介者模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.4.3" data-path="../设计模式/行为型模型/命令模式.html">
            
                <a href="../设计模式/行为型模型/命令模式.html">
            
                    
                        <b>1.15.4.3.</b>
                    
                    命令模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.4.4" data-path="../设计模式/行为型模型/备忘录模式.html">
            
                <a href="../设计模式/行为型模型/备忘录模式.html">
            
                    
                        <b>1.15.4.4.</b>
                    
                    备忘录模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.4.5" data-path="../设计模式/行为型模型/模板方法模式.html">
            
                <a href="../设计模式/行为型模型/模板方法模式.html">
            
                    
                        <b>1.15.4.5.</b>
                    
                    模板方法模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.4.6" data-path="../设计模式/行为型模型/状态模式.html">
            
                <a href="../设计模式/行为型模型/状态模式.html">
            
                    
                        <b>1.15.4.6.</b>
                    
                    状态模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.4.7" data-path="../设计模式/行为型模型/策略模式.html">
            
                <a href="../设计模式/行为型模型/策略模式.html">
            
                    
                        <b>1.15.4.7.</b>
                    
                    策略模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.4.8" data-path="../设计模式/行为型模型/职责链模式.html">
            
                <a href="../设计模式/行为型模型/职责链模式.html">
            
                    
                        <b>1.15.4.8.</b>
                    
                    职责链模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.4.9" data-path="../设计模式/行为型模型/观察者模式.html">
            
                <a href="../设计模式/行为型模型/观察者模式.html">
            
                    
                        <b>1.15.4.9.</b>
                    
                    观察者模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.4.10" data-path="../设计模式/行为型模型/解释器模式.html">
            
                <a href="../设计模式/行为型模型/解释器模式.html">
            
                    
                        <b>1.15.4.10.</b>
                    
                    解释器模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.4.11" data-path="../设计模式/行为型模型/访问者模式.html">
            
                <a href="../设计模式/行为型模型/访问者模式.html">
            
                    
                        <b>1.15.4.11.</b>
                    
                    访问者模式
            
                </a>
            

            
        </li>
    
        <li class="chapter " data-level="1.15.4.12" data-path="../设计模式/行为型模型/迭代器模式.html">
            
                <a href="../设计模式/行为型模型/迭代器模式.html">
            
                    
                        <b>1.15.4.12.</b>
                    
                    迭代器模式
            
                </a>
            

            
        </li>
    

            </ul>
            
        </li>
    

            </ul>
            
        </li>
    

    

    <li class="divider"></li>

    <li>
        <a href="https://www.gitbook.com" target="blank" class="gitbook-link">
            本书使用 GitBook 发布
        </a>
    </li>
</ul>


                </nav>
            
        
    </div>

    <div class="book-body">
        
            <div class="body-inner">
                
                    

<div class="book-header" role="navigation">
    

    <!-- Title -->
    <h1>
        <i class="fa fa-circle-o-notch fa-spin"></i>
        <a href="../.." >Kuber Apiserver Flag</a>
    </h1>
</div>




                    <div class="page-wrapper" tabindex="-1" role="main">
                        <div class="page-inner">
                            
<div id="book-search-results">
    <div class="search-noresults">
    
                                <section class="normal markdown-section">
                                
                                <div id="anchor-navigation-ex-navbar"><i class="fa fa-anchor"></i><ul><li><a href="#&#x91CD;&#x70B9;&#x53C2;&#x6570;&#x89E3;&#x8BFB;">&#x91CD;&#x70B9;&#x53C2;&#x6570;&#x89E3;&#x8BFB;</a></li></ul></div><a href="#&#x91CD;&#x70B9;&#x53C2;&#x6570;&#x89E3;&#x8BFB;" id="anchorNavigationExGoTop"><i class="fa fa-arrow-up"></i></a><h1 id="&#x91CD;&#x70B9;&#x53C2;&#x6570;&#x89E3;&#x8BFB;"><a name="&#x91CD;&#x70B9;&#x53C2;&#x6570;&#x89E3;&#x8BFB;" class="anchor-navigation-ex-anchor" href="#&#x91CD;&#x70B9;&#x53C2;&#x6570;&#x89E3;&#x8BFB;"><i class="fa fa-link" aria-hidden="true"></i></a>&#x91CD;&#x70B9;&#x53C2;&#x6570;&#x89E3;&#x8BFB;</h1>
<ul>
<li>1.advertise-address
<code>&#x5411;&#x96C6;&#x7FA4;&#x6210;&#x5458;&#x901A;&#x77E5; apiserver &#x6D88;&#x606F;&#x7684; IP &#x5730;&#x5740;&#x3002;&#x8FD9;&#x4E2A;&#x5730;&#x5740;&#x5FC5;&#x987B;&#x80FD;&#x591F;&#x88AB;&#x96C6;&#x7FA4;&#x4E2D;&#x5176;&#x4ED6;&#x6210;&#x5458;&#x8BBF;&#x95EE;&#x3002;&#x5982;&#x679C; IP &#x5730;&#x5740;&#x4E3A;&#x7A7A;&#xFF0C;
&#x5C06;&#x4F1A;&#x4F7F;&#x7528; --bind-address&#xFF0C;&#x5982;&#x679C;&#x672A;&#x6307;&#x5B9A; --bind-address&#xFF0C;&#x5C06;&#x4F1A;&#x4F7F;&#x7528;&#x4E3B;&#x673A;&#x7684;&#x9ED8;&#x8BA4;&#x63A5;&#x53E3;&#x5730;&#x5740;&#x3002;</code></li>
<li><p>2.allow-privileged
<code>&#x5982;&#x679C;&#x4E3A; true, &#x5C06;&#x5141;&#x8BB8;&#x7279;&#x6743;&#x5BB9;&#x5668;&#x3002;</code></p>
</li>
<li><p>3.uthorization-mode=Node,RBAC
<code>&#x5728;&#x5B89;&#x5168;&#x7AEF;&#x53E3;&#x4E0A;&#x8FDB;&#x884C;&#x6743;&#x9650;&#x9A8C;&#x8BC1;&#x7684;&#x63D2;&#x4EF6;&#x7684;&#x987A;&#x5E8F;&#x5217;&#x8868;&#x3002;&#x4EE5;&#x9017;&#x53F7;&#x5206;&#x9694;&#x7684;&#x5217;&#x8868;&#xFF0C;&#x5305;&#x62EC;&#xFF1A;AlwaysAllow,AlwaysDeny,ABAC,Webhook,RBAC,Node.
&#xFF08;&#x9ED8;&#x8BA4;&#x503C; &quot;AlwaysAllow&quot;&#xFF09;</code></p>
</li>
<li><p>4.client-ca-file=/etc/kubernetes/pki/ca.crt
<code>&#x5982;&#x679C;&#x8BBE;&#x7F6E;&#x6B64;&#x6807;&#x5FD7;&#xFF0C;&#x5BF9;&#x4E8E;&#x4EFB;&#x4F55;&#x8BF7;&#x6C42;&#xFF0C;&#x5982;&#x679C;&#x5B58;&#x5305;&#x542B; client-ca-file &#x4E2D;&#x7684; authorities &#x7B7E;&#x540D;&#x7684;&#x5BA2;&#x6237;&#x7AEF;&#x8BC1;&#x4E66;&#xFF0C;&#x5C06;&#x4F1A;&#x4F7F;&#x7528;&#x5BA2;&#x6237;&#x7AEF;&#x8BC1;&#x4E66;&#x4E2D;&#x7684; 
CommonName &#x5BF9;&#x5E94;&#x7684;&#x8EAB;&#x4EFD;&#x8FDB;&#x884C;&#x8BA4;&#x8BC1;&#x3002;</code></p>
</li>
<li><p>5.enable-admission-plugins=NodeRestriction
<code>&#x6FC0;&#x6D3B;&#x51C6;&#x5165;&#x63A7;&#x5236;&#x63D2;&#x4EF6;
AlwaysAdmit, AlwaysDeny, AlwaysPullImages, DefaultStorageClass, DefaultTolerationSeconds, 
DenyEscalatingExec, DenyExecOnPrivileged, EventRateLimit, ExtendedResourceToleration,
ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, 
MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, 
NodeRestriction, OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, 
PersistentVolumeLabel, PodNodeSelector, PodPreset, PodSecurityPolicy, PodTolerationRestriction,
Priority, ResourceQuota, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection, 
TaintNodesByCondition, ValidatingAdmissionWebhook.</code></p>
</li>
<li><p>6.enable-bootstrap-token-auth=true
<code>&#x542F;&#x7528;&#x6B64;&#x9009;&#x9879;&#x4EE5;&#x5141;&#x8BB8; &apos;kube-system&apos; &#x547D;&#x540D;&#x7A7A;&#x95F4;&#x4E2D;&#x7684; &apos;bootstrap.kubernetes.io/token&apos; &#x7C7B;&#x578B;&#x5BC6;&#x94A5;&#x53EF;&#x4EE5;&#x88AB;&#x7528;&#x4E8E; TLS &#x7684;&#x542F;&#x52A8;&#x8BA4;&#x8BC1;&#x3002;</code></p>
</li>
<li><p>7.etcd-cafile=/etc/kubernetes/pki/etcd/ca.crt
<code>&#x7528;&#x4E8E;&#x4FDD;&#x62A4; etcd &#x901A;&#x4FE1;&#x7684; SSL CA &#x6587;&#x4EF6;</code></p>
</li>
<li><p>8.etcd-certfile=/etc/kubernetes/pki/apiserver-etcd-client.crt
<code>&#x7528;&#x4E8E;&#x4FDD;&#x62A4; etcd &#x901A;&#x4FE1;&#x7684;&#x7684; SSL &#x8BC1;&#x4E66;&#x6587;&#x4EF6;</code></p>
</li>
<li><p>9.etcd-keyfile=/etc/kubernetes/pki/apiserver-etcd-client.key
<code>&#x7528;&#x4E8E;&#x4FDD;&#x62A4; etcd &#x901A;&#x4FE1;&#x7684; SSL &#x5BC6;&#x94A5;&#x6587;&#x4EF6;</code></p>
</li>
<li><p>10.etcd-servers=<a href="https://127.0.0.1:2379" target="_blank">https://127.0.0.1:2379</a>
<code>&#x8FDE;&#x63A5;&#x7684; etcd &#x670D;&#x52A1;&#x5668;&#x5217;&#x8868; , &#x5F62;&#x5F0F;&#x4E3A;&#xFF08;scheme://ip:port)&#xFF0C;&#x4F7F;&#x7528;&#x9017;&#x53F7;&#x5206;&#x9694;&#x3002;</code></p>
</li>
<li><p>11.insecure-port=0
<code>&#x7528;&#x4E8E;&#x76D1;&#x542C;&#x4E0D;&#x5B89;&#x5168;&#x548C;&#x4E3A;&#x8BA4;&#x8BC1;&#x8BBF;&#x95EE;&#x7684;&#x7AEF;&#x53E3;&#x3002;&#x8FD9;&#x4E2A;&#x914D;&#x7F6E;&#x5047;&#x8BBE;&#x4F60;&#x5DF2;&#x7ECF;&#x8BBE;&#x7F6E;&#x4E86;&#x9632;&#x706B;&#x5899;&#x89C4;&#x5219;&#xFF0C;&#x4F7F;&#x5F97;&#x8FD9;&#x4E2A;&#x7AEF;&#x53E3;&#x4E0D;&#x80FD;&#x4ECE;&#x96C6;&#x7FA4;&#x5916;&#x8BBF;&#x95EE;&#x3002;&#x5BF9;&#x96C6;&#x7FA4;&#x7684;&#x516C;&#x5171;&#x5730;&#x5740;&#x7684; 443
&#x7AEF;&#x53E3;&#x7684;&#x8BBF;&#x95EE;&#x5C06;&#x88AB;&#x4EE3;&#x7406;&#x5230;&#x8FD9;&#x4E2A;&#x7AEF;&#x53E3;&#x3002;&#x9ED8;&#x8BA4;&#x8BBE;&#x7F6E;&#x4E2D;&#x4F7F;&#x7528; nginx &#x5B9E;&#x73B0;&#x3002;&#xFF08;&#x9ED8;&#x8BA4;&#x503C; 8080&#xFF09;</code></p>
</li>
<li><p>13.kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
<code>&#x7528;&#x4E8E; kubelet &#x8FDE;&#x63A5;&#x7684;&#x9996;&#x9009; NodeAddressTypes &#x5217;&#x8868;&#x3002; ( &#x9ED8;&#x8BA4;&#x503C;[Hostname,InternalDNS,InternalIP,ExternalDNS,ExternalIP])</code></p>
</li>
<li><p>17.requestheader-allowed-names=front-proxy-client
<code>&#x4F7F;&#x7528; --requestheader-username-headers &#x6307;&#x5B9A;&#x7684;&#xFF0C;&#x5141;&#x8BB8;&#x5728;&#x5934;&#x90E8;&#x63D0;&#x4F9B;&#x7528;&#x6237;&#x540D;&#x7684;&#x5BA2;&#x6237;&#x7AEF;&#x8BC1;&#x4E66;&#x901A;&#x7528;&#x540D;&#x79F0;&#x5217;&#x8868;&#x3002;&#x5982;&#x679C;&#x4E3A;&#x7A7A;&#xFF0C;&#x4EFB;&#x4F55;&#x901A;&#x8FC7; 
--requestheader-client-ca-file &#x4E2D; authorities &#x9A8C;&#x8BC1;&#x7684;&#x5BA2;&#x6237;&#x7AEF;&#x8BC1;&#x4E66;&#x90FD;&#x662F;&#x88AB;&#x5141;&#x8BB8;&#x7684;&#x3002;</code></p>
</li>
<li><p>19.requestheader-extra-headers-prefix=X-Remote-Extra-
<code>&#x7528;&#x4E8E;&#x68C0;&#x67E5;&#x7684;&#x8BF7;&#x6C42;&#x5934;&#x7684;&#x524D;&#x7F00;&#x5217;&#x8868;&#x3002;&#x5EFA;&#x8BAE;&#x4F7F;&#x7528; X-Remote-Extra-&#x3002;</code></p>
</li>
<li><p>20.requestheader-group-headers=X-Remote-Group
<code>&#x7528;&#x4E8E;&#x68C0;&#x67E5;&#x7FA4;&#x7EC4;&#x7684;&#x8BF7;&#x6C42;&#x5934;&#x5217;&#x8868;&#x3002;&#x5EFA;&#x8BAE;&#x4F7F;&#x7528; X-Remote-Group.</code></p>
</li>
<li><p>21.requestheader-username-headers=X-Remote-User
<code>&#x7528;&#x4E8E;&#x68C0;&#x67E5;&#x7528;&#x6237;&#x540D;&#x7684;&#x8BF7;&#x6C42;&#x5934;&#x5217;&#x8868;&#x3002;&#x5EFA;&#x8BAE;&#x4F7F;&#x7528; X-Remote-User&#x3002;</code></p>
</li>
<li><p>23.service-account-key-file=/etc/kubernetes/pki/sa.pub
<code>&#x5305;&#x542B; PEM &#x52A0;&#x5BC6;&#x7684; x509 RSA &#x6216; ECDSA &#x79C1;&#x94A5;&#x6216;&#x516C;&#x94A5;&#x7684;&#x6587;&#x4EF6;&#xFF0C;&#x7528;&#x4E8E;&#x9A8C;&#x8BC1; ServiceAccount &#x4EE4;&#x724C;&#x3002;&#x5982;&#x679C;&#x8BBE;&#x7F6E;&#x8BE5;&#x503C;&#xFF0C;--tls-private-key-file &#x5C06;&#x4F1A;&#x88AB;&#x4F7F;&#x7528;&#x3002;
&#x6307;&#x5B9A;&#x7684;&#x6587;&#x4EF6;&#x53EF;&#x4EE5;&#x5305;&#x542B;&#x591A;&#x4E2A;&#x5BC6;&#x94A5;&#xFF0C;&#x5E76;&#x4E14;&#x8FD9;&#x4E2A;&#x6807;&#x5FD7;&#x53EF;&#x4EE5;&#x548C;&#x4E0D;&#x540C;&#x7684;&#x6587;&#x4EF6;&#x4E00;&#x8D77;&#x591A;&#x6B21;&#x4F7F;&#x7528;&#x3002;</code></p>
</li>
<li><p>24.service-cluster-ip-range=20.96.0.0/12
<code>CIDR &#x8868;&#x793A;&#x7684; IP &#x8303;&#x56F4;&#xFF0C;&#x670D;&#x52A1;&#x7684; cluster ip &#x5C06;&#x4ECE;&#x4E2D;&#x5206;&#x914D;&#x3002; &#x4E00;&#x5B9A;&#x4E0D;&#x8981;&#x548C;&#x5206;&#x914D;&#x7ED9; nodes &#x548C; pods &#x7684; IP &#x8303;&#x56F4;&#x4EA7;&#x751F;&#x91CD;&#x53E0;&#x3002;</code></p>
</li>
</ul>
<p>Generic flags:</p>
<pre class="language-"><code>--advertise-address ip                                                                                                                           
          The IP address on which to advertise the apiserver to members of the cluster. This address must be reachable by the rest of the cluster.
          If blank, the --bind-address will be used. If --bind-address is unspecified, the host&apos;s default interface will be used.
          # &#x5411;&#x96C6;&#x7FA4;&#x6210;&#x5458;&#x53D1;&#x5E03;apiserver&#x7684;IP&#x5730;&#x5740;&#xFF0C;&#x8BE5;&#x5730;&#x5740;&#x5FC5;&#x987B;&#x80FD;&#x591F;&#x88AB;&#x96C6;&#x7FA4;&#x7684;&#x6210;&#x5458;&#x8BBF;&#x95EE;&#x3002;&#x5982;&#x679C;&#x4E3A;&#x7A7A;&#xFF0C;&#x5219;&#x4F7F;&#x7528; --bind-address&#xFF0C;&#x5982;&#x679C; --bind-address&#x672A;&#x6307;&#x5B9A;&#xFF0C;&#x90A3;&#x4E48;&#x4F7F;&#x7528;&#x4E3B;&#x673A;&#x7684;&#x9ED8;&#x8BA4;&#x63A5;&#x53E3;(IP)&#x3002;

--cloud-provider-gce-lb-src-cidrs cidrs                                                                                                          
          CIDRs opened in GCE firewall for LB traffic proxy &amp; health checks (default 130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16)
          # GCE&#x9632;&#x706B;&#x5899;&#x4E2D;&#x5F00;&#x653E;&#x7684;L7 LB traffic proxy&amp;health&#x68C0;&#x67E5;&#x7684;CIDRs&#x8BBE;&#x7F6E;
          # &#x9ED8;&#x8BA4;&#x503C;&#x4E3A;130.211.0.0/22, 35.191.0.0/16

--cors-allowed-origins strings                                                                                                                   
          List of allowed origins for CORS, comma separated.  An allowed origin can be a regular expression to support subdomain matching. If this
          list is empty CORS will not be enabled.
          # &#x8DE8;&#x57DF;&#x6570;&#x7EC4;&#xFF0C;&#x4F7F;&#x7528;&#x9017;&#x53F7;&#x95F4;&#x9694;&#x3002;&#x652F;&#x6301;&#x6B63;&#x5219;&#x8868;&#x8FBE;&#x8FDB;&#x884C;&#x5B50;&#x57DF;&#x540D;&#x5339;&#x914D;&#xFF0C;&#x5982;&#x679C;&#x53C2;&#x6570;&#x4E3A;&#x7A7A;&#xFF0C;&#x5219;&#x4E0D;&#x542F;&#x7528;&#x3002;
--default-not-ready-toleration-seconds int                                                                                                       
          Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have
          such a toleration. (default 300)
          # &#x6307;&#x5B9A;notReady:NoExecute toleration&#x7684;&#x503C;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;300
          # &#x82E5;pod&#x4E2D;&#x672A;&#x4E3A;notReady:NoExecute toleration&#x8BBE;&#x5B9A;&#x503C;&#xFF0C;&#x5219;&#x4F7F;&#x7528;&#x8BE5;&#x503C;

--default-unreachable-toleration-seconds int                                                                                                     
          Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already
          have such a toleration. (default 300)
          # &#x6307;&#x5B9A;unreachable:NoExecute&#x7684;tolerationSeconds&#x503C;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;300
          # &#x82E5;pod&#x4E2D;&#x672A;&#x4E3A;unreachable:NoExecute tolerationSeconds&#x8BBE;&#x5B9A;&#x503C;&#xFF0C;&#x5219;&#x4F7F;&#x7528;&#x8BE5;&#x503C;

--enable-inflight-quota-handler                                                                                                                  
          If true, replace the max-in-flight handler with an enhanced one that queues and dispatches with priority and fairness
          # &#x82E5;&#x4E3A;true&#xFF0C;&#x5219;&#x4EE5;&#x589E;&#x5F3A;&#x7248;&#x7684;&#x4F18;&#x5148;/&#x516C;&#x5E73;&#x5217;&#x961F;&#x53CA;&#x5206;&#x53D1;&#x529F;&#x80FD;&#x6765;&#x66FF;&#x6362;max-in-flight handler

--external-hostname string                                                                                                                       
          The hostname to use when generating externalized URLs for this master (e.g. Swagger API Docs).
          # &#x4E3A;&#x6B64;&#x4E3B;&#x673A;&#x751F;&#x6210;&#x5916;&#x90E8;&#x5316;URL&#x65F6;&#x8981;&#x4F7F;&#x7528;&#x7684;&#x4E3B;&#x673A;&#x540D;&#xFF08;&#x4F8B;&#x5982;Swagger API&#x6587;&#x6863;&#xFF09;

--feature-gates mapStringBool                                                                                                                    
          A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
          APIListChunking=true|false (BETA - default=true)
          APIResponseCompression=true|false (ALPHA - default=false)
          AllAlpha=true|false (ALPHA - default=false)
          AppArmor=true|false (BETA - default=true)
          AttachVolumeLimit=true|false (BETA - default=true)
          BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)
          BlockVolume=true|false (BETA - default=true)
          BoundServiceAccountTokenVolume=true|false (ALPHA - default=false)
          CPUManager=true|false (BETA - default=true)
          CRIContainerLogRotation=true|false (BETA - default=true)
          CSIBlockVolume=true|false (BETA - default=true)
          CSIDriverRegistry=true|false (BETA - default=true)
          CSIInlineVolume=true|false (ALPHA - default=false)
          CSIMigration=true|false (ALPHA - default=false)
          CSIMigrationAWS=true|false (ALPHA - default=false)
          CSIMigrationAzureDisk=true|false (ALPHA - default=false)
          CSIMigrationAzureFile=true|false (ALPHA - default=false)
          CSIMigrationGCE=true|false (ALPHA - default=false)
          CSIMigrationOpenStack=true|false (ALPHA - default=false)
          CSINodeInfo=true|false (BETA - default=true)
          CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)
          CustomResourceDefaulting=true|false (ALPHA - default=false)
          CustomResourcePublishOpenAPI=true|false (BETA - default=true)
          CustomResourceSubresources=true|false (BETA - default=true)
          CustomResourceValidation=true|false (BETA - default=true)
          CustomResourceWebhookConversion=true|false (BETA - default=true)
          DebugContainers=true|false (ALPHA - default=false)
          DevicePlugins=true|false (BETA - default=true)
          DryRun=true|false (BETA - default=true)
          DynamicAuditing=true|false (ALPHA - default=false)
          DynamicKubeletConfig=true|false (BETA - default=true)
          ExpandCSIVolumes=true|false (ALPHA - default=false)
          ExpandInUsePersistentVolumes=true|false (BETA - default=true)
          ExpandPersistentVolumes=true|false (BETA - default=true)
          ExperimentalCriticalPodAnnotation=true|false (ALPHA - default=false)
          ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)
          HyperVContainer=true|false (ALPHA - default=false)
          KubeletPodResources=true|false (BETA - default=true)
          LocalStorageCapacityIsolation=true|false (BETA - default=true)
          LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)
          MountContainers=true|false (ALPHA - default=false)
          NodeLease=true|false (BETA - default=true)
          NonPreemptingPriority=true|false (ALPHA - default=false)
          PodShareProcessNamespace=true|false (BETA - default=true)
          ProcMountType=true|false (ALPHA - default=false)
          QOSReserved=true|false (ALPHA - default=false)
          RemainingItemCount=true|false (ALPHA - default=false)
          RequestManagement=true|false (ALPHA - default=false)
          ResourceLimitsPriorityFunction=true|false (ALPHA - default=false)
          ResourceQuotaScopeSelectors=true|false (BETA - default=true)
          RotateKubeletClientCertificate=true|false (BETA - default=true)
          RotateKubeletServerCertificate=true|false (BETA - default=true)
          RunAsGroup=true|false (BETA - default=true)
          RuntimeClass=true|false (BETA - default=true)
          SCTPSupport=true|false (ALPHA - default=false)
          ScheduleDaemonSetPods=true|false (BETA - default=true)
          ServerSideApply=true|false (ALPHA - default=false)
          ServiceLoadBalancerFinalizer=true|false (ALPHA - default=false)
          ServiceNodeExclusion=true|false (ALPHA - default=false)
          StorageVersionHash=true|false (BETA - default=true)
          StreamingProxyRedirects=true|false (BETA - default=true)
          SupportNodePidsLimit=true|false (BETA - default=true)
          SupportPodPidsLimit=true|false (BETA - default=true)
          Sysctls=true|false (BETA - default=true)
          TTLAfterFinished=true|false (ALPHA - default=false)
          TaintBasedEvictions=true|false (BETA - default=true)
          TaintNodesByCondition=true|false (BETA - default=true)
          TokenRequest=true|false (BETA - default=true)
          TokenRequestProjection=true|false (BETA - default=true)
          ValidateProxyRedirects=true|false (BETA - default=true)
          VolumePVCDataSource=true|false (ALPHA - default=false)
          VolumeSnapshotDataSource=true|false (ALPHA - default=false)
          VolumeSubpathEnvExpansion=true|false (BETA - default=true)
          WatchBookmark=true|false (ALPHA - default=false)
          WinDSR=true|false (ALPHA - default=false)
          WinOverlay=true|false (ALPHA - default=false)
          WindowsGMSA=true|false (ALPHA - default=false)
          # &#x7279;&#x6027;&#x95E8;&#x63A7;&#xFF0C; [&#x5177;&#x4F53;&#x53C2;&#x8003;&#x8FDE;&#x63A5;](https://kubernetes.io/zh/docs/reference/command-line-tools-reference/feature-gates/)
          # Alpha,Beta &#x7279;&#x6027;&#x4EE3;&#x8868;&#xFF1A;&#x9ED8;&#x8BA4;&#x7981;&#x7528;&#x3002;
          # General Availability (GA) &#x7279;&#x6027;&#x4E5F;&#x79F0;&#x4E3A;&#x7A33;&#x5B9A;&#x7279;&#x6027;,&#x6B64;&#x7279;&#x6027;&#x4F1A;&#x4E00;&#x76F4;&#x542F;&#x7528;&#xFF1B;&#x4F60;&#x4E0D;&#x80FD;&#x7981;&#x7528;&#x5B83;&#x3002;
--master-service-namespace string                                                                                                                
          DEPRECATED: the namespace from which the kubernetes master services should be injected into pods. (default &quot;default&quot;)
          # --namespace &#x9ED8;&#x8BA4;&#x547D;&#x540D;&#x7A7A;&#x95F4;&#x8BBE;&#x7F6E;&#xFF0C; &#x5B9E;&#x9A8C;&#x4E3A;&#x751F;&#x6548;
--max-mutating-requests-inflight int                                                                                                             
          The maximum number of mutating requests in flight at a given time. When the server exceeds this, it rejects requests. Zero for no limit.
          (default 200)
          # &#x7ED9;&#x5B9A;&#x65F6;&#x95F4;&#x5185;&#x53D8;&#x66F4;&#x8BF7;&#x6C42;&#x961F;&#x5217;&#xFF08;mutating requests in flight&#xFF09;&#x7684;&#x6700;&#x5927;&#x503C;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;200
          # &#x5F53;&#x670D;&#x52A1;&#x5668;&#x8D85;&#x8FC7;&#x8BE5;&#x503C;&#x65F6;&#xFF0C;&#x5C06;&#x62D2;&#x7EDD;&#x8BF7;&#x6C42;
          # 0&#x4E3A;&#x6CA1;&#x6709;&#x9650;&#x5236;
--max-requests-inflight int                                                                                                                      
          The maximum number of non-mutating requests in flight at a given time. When the server exceeds this, it rejects requests. Zero for no
          limit. (default 400)
          # &#x7ED9;&#x5B9A;&#x65F6;&#x95F4;&#x5185;&#x7684;&#x975E;&#x53D8;&#x66F4;&#x8BF7;&#x6C42;&#x961F;&#x5217;&#xFF08;non-mutating requests inflight&#xFF09;&#x7684;&#x6700;&#x5927;&#x503C;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;400
          # &#x5F53;&#x670D;&#x52A1;&#x5668;&#x8D85;&#x8FC7;&#x8BE5;&#x503C;&#xFF0C;&#x5C06;&#x62D2;&#x7EDD;&#x8BF7;&#x6C42;
          # 0&#x4E3A;&#x6CA1;&#x6709;&#x9650;&#x5236;
--min-request-timeout int                                                                                                                        
          An optional field indicating the minimum number of seconds a handler must keep a request open before timing it out. Currently only honored
          by the watch request handler, which picks a randomized value above this number as the connection timeout, to spread out load. (default 1800)
          # &#x53EF;&#x9009;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;1800
          # &#x8868;&#x793A;&#x5728;&#x4E00;&#x4E2A;&#x8BF7;&#x6C42;&#x8D85;&#x65F6;&#x4E4B;&#x524D;&#xFF0C;handler&#x5FC5;&#x987B;&#x4FDD;&#x6301;&#x8BE5;&#x8BF7;&#x6C42;&#x6253;&#x5F00;&#x72B6;&#x6001;&#x7684;&#x6700;&#x5C0F;&#x79D2;&#x6570;
          # &#x5F53;&#x524D;&#x4EC5;&#x88AB;watch request handler&#x652F;&#x6301;&#xFF0C;handler&#x5C06;&#x968F;&#x673A;&#x6570;&#x8BBE;&#x4E3A;&#x94FE;&#x63A5;&#x7684;&#x8D85;&#x65F6;&#x503C;&#xFF0C;&#x4EE5;&#x4FDD;&#x6301;&#x8D1F;&#x8377;
--request-timeout duration                                                                                                                       
          An optional field indicating the duration a handler must keep a request open before timing it out. This is the default request timeout for
          requests but may be overridden by flags such as --min-request-timeout for specific types of requests. (default 1m0s)
          # &#x53EF;&#x9009;&#x53C2;&#x6570;
          # &#x4E00;&#x4E2A;&#x8BF7;&#x6C42;&#x8D85;&#x65F6;&#x524D;handler&#x4FDD;&#x6301;&#x8BE5;&#x8BF7;&#x6C42;&#x6253;&#x5F00;&#x72B6;&#x6001;&#x7684;&#x6301;&#x7EED;&#x65F6;&#x95F4;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;10s
          # &#x8BE5;&#x53C2;&#x6570;&#x4E3A;&#x9ED8;&#x8BA4;&#x7684;&#x8BF7;&#x6C42;&#x8D85;&#x65F6;&#x65F6;&#x95F4;&#xFF0C;&#x4F46;&#x53EF;&#x80FD;&#x4F1A;&#x88AB;&#x5176;&#x4ED6;&#x53C2;&#x6570;&#x8986;&#x76D6;&#xFF0C;&#x6BD4;&#x5982;--min-request-timeout
--target-ram-mb int                                                                                                                              
          Memory limit for apiserver in MB (used to configure sizes of caches, etc.)
          # &#x9650;&#x5236;apiserver&#x4F7F;&#x7528;&#x7684;&#x5185;&#x5B58;&#x5927;&#x5C0F;&#xFF0C;&#x5355;&#x4F4D;MB&#xFF0C;&#xFF08;&#x7528;&#x6765;&#x914D;&#x7F6E;&#x7F13;&#x5B58;&#x5927;&#x5C0F;&#x7B49;&#x7B49;&#xFF09;
</code></pre><p>Etcd flags:</p>
<pre class="language-"><code>  --default-watch-cache-size int                                                                                                                   
            Default watch cache size. If zero, watch cache will be disabled for resources that do not have a default watch size set. (default 100)
            # &#x9ED8;&#x8BA4;&#x7684;watch&#x7F13;&#x5B58;&#x5927;&#x5C0F;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;100
            # &#x82E5;&#x4E3A;0&#xFF0C;&#x672A;&#x8BBE;&#x7F6E;&#x9ED8;&#x8BA4;watch size&#x7684;&#x8D44;&#x6E90;&#x7684;watch&#x7F13;&#x5B58;&#x5C06;&#x5173;&#x95ED;
  --delete-collection-workers int                                                                                                                  
            Number of workers spawned for DeleteCollection call. These are used to speed up namespace cleanup. (default 1)
            # &#x8BBE;&#x5B9A;&#x8C03;&#x7528;DeleteCollection&#x7684;worker&#x6570;&#x91CF;&#xFF0C;workers&#x88AB;&#x7528;&#x6765;&#x52A0;&#x901F;&#x6E05;&#x7406;namespace
            # &#x9ED8;&#x8BA4;&#x503C;&#x4E3A;1
  --enable-garbage-collector                                                                                                                       
            Enables the generic garbage collector. MUST be synced with the corresponding flag of the kube-controller-manager. (default true)
            # &#x662F;&#x5426;&#x542F;&#x7528;&#x901A;&#x7528;garbage collector&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;true
            # &#x5FC5;&#x987B;&#x4E0E;kube-controller-manager&#x5BF9;&#x5E94;&#x53C2;&#x6570;&#x4E00;&#x81F4;
  --encryption-provider-config string                                                                                                              
            The file containing configuration for encryption providers to be used for storing secrets in etcd
            # &#x5B58;&#x50A8;secrets&#x5230;etcd&#x5185;&#x7684;encryption provider&#x7684;&#x914D;&#x7F6E;&#x6587;&#x4EF6;&#x8DEF;&#x5F84;
  --etcd-cafile string                                                                                                                             
            SSL Certificate Authority file used to secure etcd communication.
            # etcd &#x6388;&#x6743;&#x6587;&#x4EF6;
  --etcd-certfile string                                                                                                                           
            SSL certification file used to secure etcd communication.
            # etcd &#x8BC1;&#x4E66;&#x6587;&#x4EF6;
  --etcd-compaction-interval duration                                                                                                              
            The interval of compaction requests. If 0, the compaction request from apiserver is disabled. (default 5m0s)
            # &#x538B;&#x7F29;&#x8BF7;&#x6C42;&#x95F4;&#x9694;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;5m0s
            # &#x82E5;&#x4E3A;0&#xFF0C;&#x5219;&#x5173;&#x95ED;API Server&#x7684;&#x538B;&#x7F29;&#x8BF7;&#x6C42;
  --etcd-count-metric-poll-period duration                                                                                                         
            Frequency of polling etcd for number of resources per type. 0 disables the metric collection. (default 1m0s)
            # &#x8C03;&#x67E5;etcd&#x4E2D;&#x6BCF;&#x79CD;&#x8D44;&#x6E90;&#x7684;&#x6570;&#x91CF;&#x7684;&#x9891;&#x7387;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;1m0s
            # &#x82E5;&#x4E3A;0&#xFF0C;&#x5219;&#x5173;&#x95ED;metric&#x7684;&#x6536;&#x96C6;
  --etcd-keyfile string                                                                                                                            
            SSL key file used to secure etcd communication.
            # etch &#x8BC1;&#x4E66;key&#x6587;&#x4EF6;
  --etcd-prefix string                                                                                                                             
            The prefix to prepend to all resource paths in etcd. (default &quot;/registry&quot;)
            # &#x8BBE;&#x5B9A;etcd&#x4E2D;&#x6240;&#x6709;&#x8D44;&#x6E90;&#x8DEF;&#x5F84;&#x7684;&#x524D;&#x7F00;
            # &#x9ED8;&#x8BA4;&#x503C;&#x4E3A;/registry
  --etcd-servers strings                                                                                                                           
            List of etcd servers to connect with (scheme://ip:port), comma separated.
            # &#x8BBE;&#x5B9A;etcd server&#x5217;&#x8868;&#xFF08;scheme://ip:port&#xFF09;&#xFF0C;&#x4EE5;&#x9017;&#x53F7;&#x5206;&#x9694;
  --etcd-servers-overrides strings                                                                                                                 
            Per-resource etcd servers overrides, comma separated. The individual override format: group/resource#servers, where servers are URLs,
            semicolon separated.
            # &#x4EE5;&#x6BCF;&#x79CD;&#x8D44;&#x6E90;&#x6765;&#x91CD;&#x5199;&#xFF08;&#x5206;&#x9694;&#xFF1F;&#xFF09;etcd server&#xFF0C;&#x4EE5;&#x9017;&#x53F7;&#x5206;&#x9694;
            # &#x5355;&#x4E2A;&#x91CD;&#x5199;&#x683C;&#x5F0F;&#xFF1A;group/resorce#servers&#xFF0C;servers&#x9700;&#x4E3A;URLs&#xFF0C;&#x4EE5;&#x5206;&#x53F7;&#x5206;&#x9694;
  --storage-backend string                                                                                                                         
            The storage backend for persistence. Options: &apos;etcd3&apos; (default).
            # &#x6301;&#x4E45;&#x5316;&#x5B58;&#x50A8;&#x540E;&#x7AEF;&#x7684;&#x540D;&#x79F0;&#xFF0C;&#x53EF;&#x9009;&#x9879;&#xFF1A;etcd3&#xFF08;&#x9ED8;&#x8BA4;&#xFF09;
  --storage-media-type string                                                                                                                      
            The media type to use to store objects in storage. Some resources or storage backends may only support a specific media type and will
            ignore this setting. (default &quot;application/vnd.kubernetes.protobuf&quot;)
            # &#x4ED3;&#x5E93;&#x4E2D;&#x5B58;&#x50A8;&#x5BF9;&#x8C61;&#x7684;&#x5A92;&#x4ECB;&#x7C7B;&#x578B;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;application/vnd.kubernetes.protobuf
            # &#x67D0;&#x4E9B;&#x8D44;&#x6E90;&#x6216;&#x5B58;&#x50A8;&#x540E;&#x7AEF;&#x53EF;&#x80FD;&#x53EA;&#x652F;&#x6301;&#x7279;&#x5B9A;&#x7684;&#x5A92;&#x4ECB;&#x7C7B;&#x578B;&#xFF0C;&#x5C06;&#x5FFD;&#x7565;&#x6B64;&#x53C2;&#x6570;&#x8BBE;&#x5B9A;
  --watch-cache                                                                                                                                    
            Enable watch caching in the apiserver (default true)
  --watch-cache-sizes strings                                                                                                                      
            Watch cache size settings for some resources (pods, nodes, etc.), comma separated. The individual setting format: resource[.group]#size,
            where resource is lowercase plural (no version), group is omitted for resources of apiVersion v1 (the legacy core API) and included for
            others, and size is a number. It takes effect when watch-cache is enabled. Some resources (replicationcontrollers, endpoints, nodes, pods,
            services, apiservices.apiregistration.k8s.io) have system defaults set by heuristics, others default to default-watch-cache-size
            # &#x6839;&#x636E;&#x8D44;&#x6E90;&#x7C7B;&#x578B;&#x8BBE;&#x5B9A;watch&#x7F13;&#x5B58;&#xFF0C;&#x4EE5;&#x9017;&#x53F7;&#x5206;&#x9694;
            # &#x8BBE;&#x7F6E;&#x683C;&#x5F0F;resource[.group]#size&#xFF0C;&#x8D44;&#x6E90;&#x7C7B;&#x578B;&#x9700;&#x5C0F;&#x5199;&#xFF08;&#x65E0;&#x7248;&#x672C;&#x53F7;&#xFF09;&#xFF0C;apiVersionV1&#xFF08;legacy core API&#xFF09;&#x53EF;&#x7701;&#x7565;group&#xFF0C;&#x5176;&#x4ED6;apiVersion&#x4E0D;&#x53EF;&#x7701;&#x7565;group&#xFF0C;size&#x4E3A;&#x6570;&#x5B57;&#x3002;
            # &#x5F53;--watch-cache&#x5F00;&#x542F;&#x65F6;&#x751F;&#x6548;
            # &#x67D0;&#x4E9B;&#x8D44;&#x6E90;&#xFF08;replicationcontrollers, endpoints, nodes, pods, services, apiservices.apiregistration.k8s.io&#xFF09;&#x5177;&#x6709;&#x9ED8;&#x8BA4;&#x7684;&#x7CFB;&#x7EDF;&#x8BBE;&#x7F6E;&#xFF0C;&#x5176;&#x4ED6;&#x8D44;&#x6E90;&#x4EE5;--default-watch-cache-size&#x4E3A;&#x9ED8;&#x8BA4;&#x503C;
</code></pre><p>Secure serving flags:</p>
<pre class="language-"><code>  --bind-address ip                                                                                                                                
            The IP address on which to listen for the --secure-port port. The associated interface(s) must be reachable by the rest of the cluster,
            and by CLI/web clients. If blank, all interfaces will be used (0.0.0.0 for all IPv4 interfaces and :: for all IPv6 interfaces). (default
            0.0.0.0)
            # &#x76D1;&#x542C;--secure-port&#x7AEF;&#x53E3;&#x7684;IP&#x5730;&#x5740;
            # &#x8BE5;&#x63A5;&#x53E3;&#x5FC5;&#x987B;&#x88AB;&#x96C6;&#x7FA4;&#x4E2D;&#x7684;&#x5176;&#x4ED6;&#x6210;&#x5458;&#x3001;CLI/web&#x5BA2;&#x6237;&#x7AEF;&#x53EF;&#x8FBE;
            # &#x5982;&#x679C;&#x4E3A;&#x7A7A;&#xFF0C;&#x5219;&#x6240;&#x6709;&#x63A5;&#x53E3;&#x5C06;&#x9ED8;&#x8BA4;&#x4F7F;&#x7528;0.0.0.0(IPV4), ::(IPV6)
  --cert-dir string                                                                                                                                
            The directory where the TLS certs are located. If --tls-cert-file and --tls-private-key-file are provided, this flag will be ignored.
            (default &quot;/var/run/kubernetes&quot;)
            # TLS certs&#x6587;&#x4EF6;&#x8DEF;&#x5F84;
            # &#x9ED8;&#x8BA4;&#x503C;&#x4E3A;/var/run/kubernetes
            # &#x82E5;&#x5DF2;&#x8BBE;&#x7F6E;--tls-cert-file&#x548C;--tls-private-key-file&#xFF0C;&#x8BE5;&#x53C2;&#x6570;&#x5C06;&#x88AB;&#x5FFD;&#x7565;
  --http2-max-streams-per-connection int                                                                                                           
            The limit that the server gives to clients for the maximum number of streams in an HTTP/2 connection. Zero means to use golang&apos;s default.
            # &#x670D;&#x52A1;&#x5668;&#x63D0;&#x4F9B;&#x7ED9;&#x5BA2;&#x6237;&#x7AEF;&#x7684;&#x6700;&#x5927;HTTP/2&#x8FDE;&#x63A5;&#x6D41;&#x6570;&#x91CF;&#x9650;&#x5236;
            # 0&#x8868;&#x793A;&#x4F7F;&#x7528;golang&#x9ED8;&#x8BA4;&#x503C;
  --secure-port int                                                                                                                                
            The port on which to serve HTTPS with authentication and authorization.It cannot be switched off with 0. (default 6443)
            # https&#x5B89;&#x5168;&#x7AEF;&#x53E3;&#x53F7;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;6443
            # &#x65E0;&#x6CD5;&#x901A;&#x8FC7;&#x8BBE;&#x4E3A;0&#x6765;&#x5173;&#x95ED;&#x6B64;&#x7AEF;&#x53E3;
  --tls-cert-file string                                                                                                                           
            File containing the default x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). If HTTPS serving is enabled,
            and --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address
            and saved to the directory specified by --cert-dir.
            # https &#x8BC1;&#x4E66;
  --tls-cipher-suites strings                                                                                                                      
            Comma-separated list of cipher suites for the server. If omitted, the default Go cipher suites will be use.  Possible values:
            TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_RC4_128_SHA,TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_RC4_128_SHA,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_RC4_128_SHA
            # &#x670D;&#x52A1;&#x5668;&#x7684;&#x5BC6;&#x7801;&#x5957;&#x4EF6;&#x7684;&#x9017;&#x53F7;&#x5206;&#x9694;&#x5217;&#x8868;&#x3002; &#x5982;&#x679C;&#x7701;&#x7565;&#xFF0C;&#x5C06;&#x4F7F;&#x7528;&#x9ED8;&#x8BA4;&#x7684;Go&#x5BC6;&#x7801;&#x5957;&#x4EF6;&#x3002; &#x53EF;&#x80FD;&#x7684;&#x503C;&#xFF1A;
  --tls-min-version string                                                                                                                         
            Minimum TLS version supported. Possible values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13
            # &#x652F;&#x6301;&#x7684;&#x6700;&#x4F4E;TLS&#x7248;&#x672C;&#x3002; &#x53EF;&#x80FD;&#x7684;&#x503C;&#xFF1A;VersionTLS10&#xFF0C;VersionTLS11&#xFF0C;VersionTLS12&#xFF0C;VersionTLS13
  --tls-private-key-file string                                                                                                             
            File containing the default x509 private key matching --tls-cert-file.
            # &#x4E0E;--tls-cert-file&#x5339;&#x914D;&#x7684;x509&#x79C1;&#x94A5;&#x6587;&#x4EF6;&#x8DEF;&#x5F84;
  --tls-sni-cert-key namedCertKey                                                                                                                  
            A pair of x509 certificate and private key file paths, optionally suffixed with a list of domain patterns which are fully qualified domain
            names, possibly with prefixed wildcard segments. If no domain patterns are provided, the names of the certificate are extracted.
            Non-wildcard matches trump over wildcard matches, explicit domain patterns trump over extracted names. For multiple key/certificate pairs,
            use the --tls-sni-cert-key multiple times. Examples: &quot;example.crt,example.key&quot; or &quot;foo.crt,foo.key:*.foo.com,foo.com&quot;. (default [])
            # &#x542B;&#x6709;x509&#x8BC1;&#x4E66;&#x548C;&#x79C1;&#x94A5;&#x5BF9;&#x7684;&#x6587;&#x4EF6;&#x8DEF;&#x5F84;&#xFF0C;&#x53EF;&#x4EE5;&#x4EE5;FQDN&#x683C;&#x5F0F;&#x7684;&#x57DF;&#x540D;&#x5217;&#x8868;&#x4F5C;&#x4E3A;&#x540E;&#x7F00;&#xFF08;&#x652F;&#x6301;&#x4EE5;&#x901A;&#x914D;&#x7B26;&#x4E3A;&#x524D;&#x7F00;&#xFF09;&#xFF0C;&#x82E5;&#x672A;&#x63D0;&#x4F9B;&#x57DF;&#x540D;&#xFF0C;&#x5C06;&#x63D0;&#x53D6;&#x8BC1;&#x4E66;&#x7684;&#x6587;&#x4EF6;&#x540D;
            # &#x4F18;&#x5148;&#x65E0;&#x901A;&#x914D;&#x7B26;&#x7684;&#x914D;&#x5BF9;&#x800C;&#x975E;&#x6709;&#x901A;&#x914D;&#x7B26;&#x7684;&#x914D;&#x5BF9;&#xFF0C;&#x4F18;&#x5148;&#x6709;&#x660E;&#x786E;&#x7684;&#x57DF;&#x540D;&#x683C;&#x5F0F;&#x800C;&#x975E;&#x63D0;&#x53D6;&#x7684;&#x6587;&#x4EF6;&#x540D;
            # &#x82E5;&#x6709;&#x591A;&#x4E2A;key/cerficate&#x5BF9;&#xFF0C;&#x53EF;&#x8BBE;&#x7F6E;&#x591A;&#x4E2A;--tls-sni-cert-key
            # &#x4F8B;&#x5982;&#xFF1A;&quot;example.crt,example.key&quot; or &quot;foo.crt,foo.key:*.foo.com,foo.com&quot;
</code></pre><p>Insecure serving flags:</p>
<pre class="language-"><code>  --address ip                                                                                                                                     
            The IP address on which to serve the insecure --port (set to 0.0.0.0 for all IPv4 interfaces and :: for all IPv6 interfaces). (default
            127.0.0.1) (DEPRECATED: see --bind-address instead.)
            # &#x5B89;&#x5168;&#x7684;ip&#x5730;&#x5740;&#x670D;&#x52A1;
  --insecure-bind-address ip                                                                                                                       
            The IP address on which to serve the --insecure-port (set to 0.0.0.0 for all IPv4 interfaces and :: for all IPv6 interfaces). (default
            127.0.0.1) (DEPRECATED: This flag will be removed in a future version.)
            # &#x7ED1;&#x5B9A;&#x4E0D;&#x5B89;&#x5168;&#x7684;ip&#x5730;&#x5740;&#x670D;&#x52A1;
  --insecure-port int                                                                                                                              
            The port on which to serve unsecured, unauthenticated access. (default 8080) (DEPRECATED: This flag will be removed in a future version.)
            # &#x4E0D;&#x5B89;&#x5168;&#x7684;&#x7AEF;&#x53E3;&#x66B4;&#x9732;
  --port int                                                                                                                                       
            The port on which to serve unsecured, unauthenticated access. Set to 0 to disable. (default 8080) (DEPRECATED: see --secure-port instead.)
            # &#x5B89;&#x5168;&#x7684;&#x7AEF;&#x53E3;&#x66B4;&#x9732;
</code></pre><p>Auditing flags:</p>
<pre class="language-"><code>  --audit-dynamic-configuration                                                                                                                    
            Enables dynamic audit configuration. This feature also requires the DynamicAuditing feature flag
            # &#x662F;&#x5426;&#x542F;&#x7528;dynamic audit configuration
            # &#x8BE5;&#x53C2;&#x6570;&#x9700;&#x8981;&#x5148;&#x8BBE;&#x7F6E;DynamicAuditing&#x53C2;&#x6570;
  --audit-log-batch-buffer-size int                                                                                                                
            The size of the buffer to store events before batching and writing. Only used in batch mode. (default 10000)
            # &#x6279;&#x91CF;&#x5199;&#x5165;audit-log&#x524D;&#x5B58;&#x50A8;&#x7684;&#x4E8B;&#x4EF6;&#x7684;&#x7F13;&#x5B58;&#x5927;&#x5C0F;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;10000
            # &#x4EC5;batch&#x6A21;&#x5F0F;&#x53EF;&#x7528;
  --audit-log-batch-max-size int                                                                                                                   
            The maximum size of a batch. Only used in batch mode. (default 1)
            # audit-log-batch&#x7684;&#x6700;&#x5927;&#x503C;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;1
            # &#x4EC5;batch&#x6A21;&#x5F0F;&#x53EF;&#x7528;
  --audit-log-batch-max-wait duration                                                                                                              
            The amount of time to wait before force writing the batch that hadn&apos;t reached the max size. Only used in batch mode.
            # &#x82E5;&#x4E00;&#x76F4;&#x672A;&#x8FBE;&#x5230;audit-log-batch&#x7684;&#x6700;&#x5927;&#x503C;&#xFF0C;&#x5F3A;&#x5236;&#x5199;&#x5165;&#x7684;&#x7B49;&#x5F85;&#x65F6;&#x95F4;&#x5468;&#x671F;
            # &#x4EC5;&#x5728;batch&#x6A21;&#x5F0F;&#x53EF;&#x7528;
  --audit-log-batch-throttle-burst int                                                                                                             
            Maximum number of requests sent at the same moment if ThrottleQPS was not utilized before. Only used in batch mode.
            # &#x5728;ThrottleQPS&#x672A;&#x88AB;&#x4F7F;&#x7528;&#x524D;&#xFF0C;&#x540C;&#x4E00;&#x65F6;&#x95F4;&#x53EF;&#x53D1;&#x9001;&#x7684;&#x8BF7;&#x6C42;&#x7684;&#x6700;&#x5927;&#x503C;
            # &#x4EC5;batch&#x6A21;&#x5F0F;&#x53EF;&#x7528;
  --audit-log-batch-throttle-enable                                                                                                                
            Whether batching throttling is enabled. Only used in batch mode.
            # &#x6253;&#x5F00;audit-log-batch&#x7684;throttle&#x6A21;&#x5F0F;
            # &#x4EC5;batch&#x6A21;&#x5F0F;&#x53EF;&#x7528;
  --audit-log-batch-throttle-qps float32                                                                                                           
            Maximum average number of batches per second. Only used in batch mode.
            # &#x8BBE;&#x7F6E;audit-log-batch&#x7684;throttle QPS&#x503C;
            # &#x4EC5;batch&#x6A21;&#x5F0F;&#x53EF;&#x7528;
  --audit-log-format string                                                                                                                        
            Format of saved audits. &quot;legacy&quot; indicates 1-line text format for each event. &quot;json&quot; indicates structured json format. Known formats are
            legacy,json. (default &quot;json&quot;)
            # audit-log&#x7684;&#x6587;&#x4EF6;&#x4FDD;&#x5B58;&#x683C;&#x5F0F;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;json
            # &quot;legacy&quot;&#x4E3A;&#x4E00;&#x4E2A;&#x4E8B;&#x4EF6;&#x4E00;&#x884C;
            # &quot;json&quot;&#x4E3A;json&#x7ED3;&#x6784;&#x683C;&#x5F0F;
            # &#x73B0;&#x6709;&#x503C;&#x4E3A;legacy&#x548C;json
  --audit-log-maxage int                                                                                                                           
            The maximum number of days to retain old audit log files based on the timestamp encoded in their filename.
            # audit-log&#x7684;&#x6700;&#x5927;&#x4FDD;&#x7559;&#x5929;&#x6570;&#xFF0C;&#x4EE5;&#x6587;&#x4EF6;&#x540D;&#x4E2D;&#x7684;&#x65F6;&#x95F4;&#x6233;&#x4E3A;&#x57FA;&#x7840;&#x8BA1;&#x7B97;
  --audit-log-maxbackup int                                                                                                                        
            The maximum number of old audit log files to retain.
            # audit-log&#x6587;&#x4EF6;&#x7684;&#x6700;&#x5927;&#x4FDD;&#x7559;&#x6570;&#x91CF;
  --audit-log-maxsize int                                                                                                                          
            The maximum size in megabytes of the audit log file before it gets rotated.
            # rotated&#x524D;&#x5355;&#x4E2A;audit-log&#x6587;&#x4EF6;&#x7684;&#x6700;&#x5927;&#x503C;&#xFF0C;&#x5355;&#x4F4D;megabytes
  --audit-log-mode string                                                                                                                          
            Strategy for sending audit events. Blocking indicates sending events should block server responses. Batch causes the backend to buffer and
            write events asynchronously. Known modes are batch,blocking,blocking-strict. (default &quot;blocking&quot;)
            # &#x53D1;&#x9001;audit-log&#x4E8B;&#x4EF6;&#x7684;&#x7B56;&#x7565;
            # blocking&#x4E3A;&#x53D1;&#x9001;&#x4E8B;&#x4EF6;&#x65F6;&#x963B;&#x585E;&#x670D;&#x52A1;&#x5668;&#x54CD;&#x5E94;
            # batch&#x4E3A;backend&#x5F02;&#x6B65;&#x7F13;&#x51B2;&#x548C;&#x5199;&#x4E8B;&#x4EF6;
            # &#x73B0;&#x6709;&#x6A21;&#x5F0F;&#x4E3A;batch, blocking, blocking-stric
  --audit-log-path string                                                                                                                          
            If set, all requests coming to the apiserver will be logged to this file.  &apos;-&apos; means standard out.
            # audit-log&#x6587;&#x4EF6;&#x7684;&#x4FDD;&#x5B58;&#x8DEF;&#x5F84;
            # &apos;-&apos;&#x8868;&#x793A;stdout
  --audit-log-truncate-enabled                                                                                                                     
            Whether event and batch truncating is enabled.
            # &#x662F;&#x5426;&#x6253;&#x5F00;event&#x548C;batch&#x7684;&#x622A;&#x65AD;&#x529F;&#x80FD;
  --audit-log-truncate-max-batch-size int                                                                                                          
            Maximum size of the batch sent to the underlying backend. Actual serialized size can be several hundreds of bytes greater. If a batch
            exceeds this limit, it is split into several batches of smaller size. (default 10485760)
            # &#x53D1;&#x9001;&#x5230;&#x5E95;&#x5C42;&#x540E;&#x7AEF;&#x7684;&#x5355;&#x4E2A;audit-log batch&#x7684;&#x6700;&#x5927;&#x503C;&#x3002;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;10485760
            # &#x5E8F;&#x5217;&#x5316;&#x540E;&#x7684;&#x5927;&#x5C0F;&#x53EF;&#x80FD;&#x4F1A;&#x591A;&#x51E0;&#x767E;&#x5B57;&#x8282;&#x3002;&#x5982;&#x679C;&#x4E00;&#x4E2A;batch&#x8D85;&#x8FC7;&#x8BE5;&#x9650;&#x5236;&#xFF0C;&#x5C06;&#x4F1A;&#x88AB;&#x5206;&#x5272;&#x6210;&#x51E0;&#x4E2A;&#x8F83;&#x5C0F;&#x7684;batch
  --audit-log-truncate-max-event-size int                                                                                                          
            Maximum size of the audit event sent to the underlying backend. If the size of an event is greater than this number, first request and
            response are removed, and if this doesn&apos;t reduce the size enough, event is discarded. (default 102400)
            # &#x53D1;&#x9001;&#x5230;&#x5E95;&#x5C42;&#x540E;&#x7AEF;&#x7684;&#x5355;&#x4E2A;audit event&#x7684;&#x6700;&#x5927;&#x503C;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;102400
            # &#x5982;&#x679C;event&#x5927;&#x4E8E;&#x8BE5;&#x503C;&#xFF0C;&#x9996;&#x4E2A;&#x8BF7;&#x6C42;&#x548C;&#x54CD;&#x5E94;&#x5C06;&#x88AB;&#x79FB;&#x9664;&#xFF0C;&#x5982;&#x679C;&#x4ECD;&#x8D85;&#x8FC7;&#x6700;&#x5927;&#x503C;&#xFF0C;&#x8BE5;event&#x5C06;&#x88AB;&#x4E22;&#x5F03;&#x3002;
  --audit-log-version string                                                                                                                       
            API group and version used for serializing audit events written to log. (default &quot;audit.k8s.io/v1&quot;)
            # &#x6307;&#x5B9A;&#x5199;&#x5165;log&#x7684;&#x5E8F;&#x5217;&#x5316;audit event&#x7684;API group&#x548C;version
            # &#x9ED8;&#x8BA4;&#x503C;&#x4E3A;&quot;audit.k8s.io/v1&quot;
  --audit-policy-file string                                                                                                                       
            Path to the file that defines the audit policy configuration.
            # audit policy&#x7684;&#x914D;&#x7F6E;&#x6587;&#x4EF6;&#x8DEF;&#x5F84;
  --audit-webhook-batch-buffer-size int                                                                                                            
            The size of the buffer to store events before batching and writing. Only used in batch mode. (default 10000)
            # &#x5728;batching&#x548C;writing&#x4E4B;&#x524D;&#x4FDD;&#x5B58;audit-webhook event&#x7684;&#x6700;&#x5927;&#x7F13;&#x5B58;&#x503C;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;10000
            # &#x4EC5;batch&#x6A21;&#x5F0F;&#x53EF;&#x7528;
  --audit-webhook-batch-max-size int                                                                                                               
            The maximum size of a batch. Only used in batch mode. (default 400)
            # &#x5355;&#x4E2A;audit-webhook batch&#x7684;&#x6700;&#x5927;&#x503C;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;400
            # &#x4EC5;batch&#x6A21;&#x5F0F;&#x53EF;&#x7528;
  --audit-webhook-batch-max-wait duration                                                                                                          
            The amount of time to wait before force writing the batch that hadn&apos;t reached the max size. Only used in batch mode. (default 30s)
            # &#x5F3A;&#x5236;&#x5199;&#x5165;&#x672A;&#x8FBE;&#x5230;&#x6700;&#x5927;size&#x7684;batch&#x7684;&#x7B49;&#x5F85;&#x65F6;&#x95F4;&#x5468;&#x671F;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;30s
            # &#x4EC5;batch&#x6A21;&#x5F0F;&#x53EF;&#x7528;
  --audit-webhook-batch-throttle-burst int                                                                                                         
            Maximum number of requests sent at the same moment if ThrottleQPS was not utilized before. Only used in batch mode. (default 15)
            # ThrottleQPS&#x672A;&#x88AB;&#x4F7F;&#x7528;&#x65F6;&#xFF0C;&#x540C;&#x65F6;&#x53D1;&#x9001;&#x8BF7;&#x6C42;&#x7684;&#x6700;&#x5927;&#x6570;&#x91CF;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;15
            # &#x4EC5;batch&#x6A21;&#x5F0F;&#x53EF;&#x7528;
  --audit-webhook-batch-throttle-enable                                                                                                            
            Whether batching throttling is enabled. Only used in batch mode. (default true)
            # &#x662F;&#x5426;&#x5F00;&#x542F;batching throttling&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;true
            # &#x4EC5;batch&#x6A21;&#x5F0F;&#x53EF;&#x7528;
  --audit-webhook-batch-throttle-qps float32                                                                                                       
            Maximum average number of batches per second. Only used in batch mode. (default 10)
            # &#x6BCF;&#x79D2;batch&#x7684;&#x6700;&#x5927;&#x5E73;&#x5747;&#x6570;&#x91CF;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;10
            # &#x4EC5;batch&#x6A21;&#x5F0F;&#x53EF;&#x7528;
  --audit-webhook-config-file string                                                                                                               
            Path to a kubeconfig formatted file that defines the audit webhook configuration.
            # audit webhook&#x7684;&#x914D;&#x7F6E;&#x6587;&#x4EF6;&#x8DEF;&#x5F84;&#xFF08;kubeconfig&#x683C;&#x5F0F;&#xFF09;
  --audit-webhook-initial-backoff duration                                                                                                         
            The amount of time to wait before retrying the first failed request. (default 10s)
            # &#x9996;&#x6B21;&#x8BF7;&#x6C42;&#x5931;&#x8D25;&#x540E;&#xFF0C;&#x91CD;&#x8BD5;&#x7684;&#x7B49;&#x5F85;&#x65F6;&#x95F4;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;10s
  --audit-webhook-mode string                                                                                                                      
            Strategy for sending audit events. Blocking indicates sending events should block server responses. Batch causes the backend to buffer and
            write events asynchronously. Known modes are batch,blocking,blocking-strict. (default &quot;batch&quot;)
            # audit-webhook&#x7684;&#x7B56;&#x7565;&#x6A21;&#x5F0F;
            # blocking&#x4E3A;&#x53D1;&#x9001;event&#x5C06;&#x963B;&#x585E;&#x670D;&#x52A1;&#x5668;&#x54CD;&#x5E94;
            # batch&#x4E3A;&#x540E;&#x7AEF;&#x5F02;&#x6B65;&#x7F13;&#x51B2;&#x548C;&#x5199;event
            # &#x5DF2;&#x6709;&#x6A21;&#x5F0F;&#x4E3A;batch, blocking, blocking-strict
  --audit-webhook-truncate-enabled                                                                                                                 
            Whether event and batch truncating is enabled.
            # &#x662F;&#x5426;&#x6253;&#x5F00;audit-webhook event&#x548C;batch&#x7684;&#x622A;&#x65AD;&#x6A21;&#x5F0F;
  --audit-webhook-truncate-max-batch-size int                                                                                                      
            Maximum size of the batch sent to the underlying backend. Actual serialized size can be several hundreds of bytes greater. If a batch
            exceeds this limit, it is split into several batches of smaller size. (default 10485760)
            # &#x53D1;&#x9001;&#x5230;&#x5E95;&#x5C42;&#x540E;&#x7AEF;&#x7684;audit-webhook batch&#x7684;&#x6700;&#x5927;&#x503C;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;10485760
            # &#x5E8F;&#x5217;&#x5316;&#x540E;&#x7684;&#x5927;&#x5C0F;&#x53EF;&#x80FD;&#x4F1A;&#x8D85;&#x8FC7;&#x6570;&#x767E;&#x5B57;&#x8282;&#xFF0C;&#x5982;&#x679C;&#x4E00;&#x4E2A;batch&#x8D85;&#x8FC7;&#x8BE5;&#x9650;&#x5236;&#xFF0C;&#x5219;&#x4F1A;&#x88AB;&#x5206;&#x5272;&#x6210;&#x51E0;&#x4E2A;&#x8F83;&#x5C0F;&#x7684;batch
  --audit-webhook-truncate-max-event-size int                                                                                                      
            Maximum size of the audit event sent to the underlying backend. If the size of an event is greater than this number, first request and
            response are removed, and if this doesn&apos;t reduce the size enough, event is discarded. (default 102400)
            # &#x53D1;&#x9001;&#x5230;&#x5E95;&#x5C42;&#x540E;&#x7AEF;&#x7684;&#x5355;&#x4E2A;audit-webhook event&#x7684;&#x6700;&#x5927;&#x503C;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;102400
            # &#x82E5;&#x67D0;&#x4E2A;event&#x5927;&#x4E8E;&#x8BE5;&#x6570;&#x503C;&#xFF0C;&#x9996;&#x4E2A;&#x8BF7;&#x6C42;&#x548C;&#x54CD;&#x5E94;&#x5C06;&#x88AB;&#x79FB;&#x9664;&#xFF0C;&#x82E5;&#x4ECD;&#x5927;&#x4E8E;&#x8BE5;&#x6570;&#x503C;&#xFF0C;&#x5219;&#x8BE5;event&#x5C06;&#x88AB;&#x4E22;&#x5F03;
  --audit-webhook-version string                                                                                                                   
            API group and version used for serializing audit events written to webhook. (default &quot;audit.k8s.io/v1&quot;)
            --audit-webhook-version-string
            # &#x5199;&#x5165;webhook&#x7684;&#x5E8F;&#x5217;&#x5316;audit event&#x7684;API group&#x548C;version
            # &#x9ED8;&#x8BA4;&#x503C;&#x4E3A;&quot;audit.k8s.io/v1&quot;
</code></pre><p>Features flags:</p>
<pre class="language-"><code>  --contention-profiling                                                                                                                           
            Enable lock contention profiling, if profiling is enabled
            # &#x82E5;&#x5206;&#x6790;&#x5DF2;&#x542F;&#x7528;&#xFF0C;&#x5219;&#x542F;&#x7528;&#x9501;&#x5B9A;&#x7ADE;&#x4E89;&#x5206;&#x6790;
            # &#x4E0D;&#x592A;&#x660E;&#x767D;&#xFF0C;&#x9700;&#x7814;&#x7A76;
  --profiling                                                                                                                                      
            Enable profiling via web interface host:port/debug/pprof/ (default true)
            # &#x5F00;&#x542F;web&#x754C;&#x9762;&#x7684;&#x5206;&#x6790;&#x529F;&#x80FD;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;true
            # &#x8BBF;&#x95EE;&#x5730;&#x5740;host:port/debug/pprof/
</code></pre><p>Authentication flags:</p>
<pre class="language-"><code>  --anonymous-auth                                                                                                                                 
            Enables anonymous requests to the secure port of the API server. Requests that are not rejected by another authentication method are
            treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.
            (default true)
            # &#x662F;&#x5426;&#x5141;&#x8BB8;&#x5BF9;API Server&#x5B89;&#x5168;&#x7AEF;&#x53E3;&#x7684;&#x533F;&#x540D;&#x8BF7;&#x6C42;&#xFF0C;&#x672A;&#x88AB;&#x5176;&#x4ED6;&#x8EAB;&#x4EFD;&#x9A8C;&#x8BC1;&#x65B9;&#x6CD5;&#x62D2;&#x7EDD;&#x7684;&#x8BF7;&#x6C42;&#x5C06;&#x88AB;&#x89C6;&#x4E3A;&#x533F;&#x540D;&#x8BF7;&#x6C42;
            # &#x533F;&#x540D;&#x8BF7;&#x6C42;&#x5177;&#x6709;system username&#xFF1A;anonymous&#xFF0C;system group name&#xFF1A;unauthenticated
            # &#x9ED8;&#x8BA4;&#x503C;&#xFF1A;true
  --api-audiences strings                                                                                                                          
            Identifiers of the API. The service account token authenticator will validate that tokens used against the API are bound to at least one
            of these audiences. If the --service-account-issuer flag is configured and this flag is not, this field defaults to a single element list
            containing the issuer URL .
            # API&#x7684;&#x6807;&#x8BC6;&#x7B26;&#x5217;&#x8868;&#x3002;service account token&#x9A8C;&#x8BC1;&#x5668;&#x5C06;&#x9A8C;&#x8BC1;token&#x4F7F;&#x7528;&#x7684;API&#x7ED1;&#x5B9A;&#x4E86;&#x81F3;&#x5C11;&#x4E00;&#x4E2A;&#x6807;&#x8BC6;&#x7B26;&#x5217;&#x8868;&#x4E2D;&#x7684;&#x503C;&#x3002;
            # &#x5982;&#x679C;&#x542F;&#x52A8;&#x4E86;service-account-issuer&#x53C2;&#x6570;&#xFF0C;&#x4F46;api-audiences&#x672A;&#x8BBE;&#x7F6E;&#xFF0C;&#x5219;&#x8BE5;&#x5B57;&#x6BB5;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;&#x5305;&#x542B;service-account-issuer&#x7684;&#x5355;&#x5143;&#x7D20;&#x5217;&#x8868;

  --authentication-token-webhook-cache-ttl duration                                                                                                
            The duration to cache responses from the webhook token authenticator. (default 2m0s)
            # webhook token&#x9A8C;&#x8BC1;&#x5668;&#x7684;&#x7F13;&#x5B58;&#x54CD;&#x5E94;&#x65F6;&#x95F4;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;2m0s
  --authentication-token-webhook-config-file string                                                                                                
            File with webhook configuration for token authentication in kubeconfig format. The API server will query the remote service to determine
            authentication for bearer tokens.
            # token&#x8BA4;&#x8BC1;&#x7684;webhook&#x914D;&#x7F6E;&#x6587;&#x4EF6;&#xFF08;kubeconfig&#x683C;&#x5F0F;&#xFF09;
            # API server&#x5C06;&#x67E5;&#x8BE2;&#x8FDC;&#x7A0B;&#x670D;&#x52A1;&#x4EE5;&#x786E;&#x5B9A;&#x4E0D;&#x8BB0;&#x540D;&#xFF08;bearer&#xFF09;token&#x7684;&#x8BA4;&#x8BC1;&#x7ED3;&#x679C;
  --basic-auth-file string                                                                                                                         
            If set, the file that will be used to admit requests to the secure port of the API server via http basic authentication.
  --client-ca-file string                                                                                                                          
            If set, any request presenting a client certificate signed by one of the authorities in the client-ca-file is authenticated with an
            identity corresponding to the CommonName of the client certificate.
  --enable-bootstrap-token-auth                                                                                                                    
            Enable to allow secrets of type &apos;bootstrap.kubernetes.io/token&apos; in the &apos;kube-system&apos; namespace to be used for TLS bootstrapping authentication.
            # &#x662F;&#x5426;&#x542F;&#x7528;TLS bootstrap&#x8BA4;&#x8BC1;&#x6A21;&#x5F0F;
  --oidc-ca-file string                                                                                                                            
            If set, the OpenID server&apos;s certificate will be verified by one of the authorities in the oidc-ca-file, otherwise the host&apos;s root CA set
            will be used.
            # OpenID server&#x7684;ca&#x6587;&#x4EF6;&#x8DEF;&#x5F84;
            # &#x82E5;&#x4E0D;&#x8BBE;&#x7F6E;&#xFF0C;&#x5C06;&#x4F7F;&#x7528;&#x672C;&#x673A;&#x7684;root ca&#x8BBE;&#x7F6E;
  --oidc-client-id string                                                                                                                          
            The client ID for the OpenID Connect client, must be set if oidc-issuer-url is set.
            # OpenID Connect&#x5BA2;&#x6237;&#x7AEF;ID
            # &#x5F53;&#x5DF2;&#x8BBE;&#x7F6E;--oidc-issuer-url&#x65F6;&#xFF0C;&#x5FC5;&#x987B;&#x8BBE;&#x7F6E;&#x8BE5;&#x53C2;&#x6570;
  --oidc-groups-claim string                                                                                                                       
            If provided, the name of a custom OpenID Connect claim for specifying user groups. The claim value is expected to be a string or array of
            strings. This flag is experimental, please see the authentication documentation for further details.
            # &#x6307;&#x5B9A;OpenID&#x7684;user groups
            # &#x8BE5;&#x503C;&#x9700;&#x4E3A;&#x5B57;&#x7B26;&#x4E32;&#x6216;&#x5B57;&#x7B26;&#x4E32;&#x6570;&#x7EC4;
            # &#x8BE5;&#x53C2;&#x6570;&#x4E3A;&#x8BD5;&#x9A8C;&#x6027;&#x8D28;&#xFF0C;&#x8BF7;&#x67E5;&#x9605;authentication&#x6587;&#x6863;&#x83B7;&#x53D6;&#x66F4;&#x591A;&#x8BE6;&#x60C5;
  --oidc-groups-prefix string                                                                                                                      
            If provided, all groups will be prefixed with this value to prevent conflicts with other authentication strategies.
            # &#x8BBE;&#x5B9A;OpenID&#x7EC4;&#x7684;&#x524D;&#x7F00;&#xFF0C;&#x4EE5;&#x4FBF;&#x4E0E;&#x5176;&#x4ED6;&#x8BA4;&#x8BC1;&#x7B56;&#x7565;&#x533A;&#x5206;
  --oidc-issuer-url string                                                                                                                         
            The URL of the OpenID issuer, only HTTPS scheme will be accepted. If set, it will be used to verify the OIDC JSON Web Token (JWT).
            # OpenID issuer&#x7684;URL&#xFF0C;&#x4EC5;&#x63A5;&#x53D7;https
            # &#x82E5;&#x8BBE;&#x7F6E;&#xFF0C;&#x5C06;&#x88AB;&#x7528;&#x6765;&#x786E;&#x8BA4;OIDC JWT&#xFF08;Json Web Token&#xFF09;
  --oidc-required-claim mapStringString                                                                                                            
            A key=value pair that describes a required claim in the ID Token. If set, the claim is verified to be present in the ID Token with a
            matching value. Repeat this flag to specify multiple claims.
            # &#x4EE5;&#x952E;&#x503C;&#x5BF9;&#x63CF;&#x8FF0;&#x7684;ID Token&#x6240;&#x9700;&#x7684;&#x65AD;&#x8A00;
            # &#x8BE5;&#x65AD;&#x8A00;&#x5C06;&#x88AB;&#x7528;&#x6765;&#x786E;&#x8BA4;ID Token&#x662F;&#x5426;&#x5339;&#x914D;
            # &#x53EF;&#x591A;&#x6B21;&#x8BBE;&#x7F6E;&#x8BE5;&#x53C2;&#x6570;&#x6765;&#x6307;&#x5B9A;&#x591A;&#x4E2A;&#x65AD;&#x8A00;
  --oidc-signing-algs strings                                                                                                                      
            Comma-separated list of allowed JOSE asymmetric signing algorithms. JWTs with a &apos;alg&apos; header value not in this list will be rejected.
            Values are defined by RFC 7518 https://tools.ietf.org/html/rfc7518#section-3.1. (default [RS256])
            # &#x53EF;&#x63A5;&#x53D7;&#x7684;JOSE&#x975E;&#x5BF9;&#x79F0;&#x7B7E;&#x540D;&#x7B97;&#x6CD5;&#x5217;&#x8868;&#xFF0C;&#x4EE5;&#x9017;&#x53F7;&#x5206;&#x9694;
            # &#x9ED8;&#x8BA4;&#x503C;&#x4E3A;RS256
            # &#x82E5;JWTs head&#x4E2D;&#x7684;alg&#x5B57;&#x6BB5;&#x503C;&#x4E0D;&#x5728;&#x8BE5;&#x5217;&#x8868;&#x4E2D;&#xFF0C;&#x5C06;&#x62D2;&#x7EDD;&#x8BE5;JWT
            # &#x53EF;&#x4F7F;&#x7528;&#x7684;&#x503C;&#x8BF7;&#x53C2;&#x8003;RFC 7518 https://tools.ietf.org/html/rfc7518#section-3.1
  --oidc-username-claim string                                                                                                                     
            The OpenID claim to use as the user name. Note that claims other than the default (&apos;sub&apos;) is not guaranteed to be unique and immutable.
            This flag is experimental, please see the authentication documentation for further details. (default &quot;sub&quot;)
            # OpenID&#x7684;&#x7528;&#x6237;&#x540D;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;sub
            # &#x8BF7;&#x6CE8;&#x610F;&#xFF0C;&#x4E0D;&#x4FDD;&#x8BC1;&#x9664;sub&#x4EE5;&#x5916;&#x7684;&#x65AD;&#x8A00;&#x503C;&#x7684;&#x552F;&#x4E00;&#x6027;&#x548C;&#x4E0D;&#x53EF;&#x53D8;&#x6027;
            # &#x8BE5;&#x53C2;&#x6570;&#x4E3A;&#x8BD5;&#x9A8C;&#x6027;&#xFF0C;&#x8BF7;&#x67E5;&#x9605;authentication&#x6587;&#x6863;&#x83B7;&#x53D6;&#x66F4;&#x591A;&#x8BE6;&#x60C5;
  --oidc-username-prefix string                                                                                                                    
            If provided, all usernames will be prefixed with this value. If not provided, username claims other than &apos;email&apos; are prefixed by the
            issuer URL to avoid clashes. To skip any prefixing, provide the value &apos;-&apos;.
            # OpenID&#x7684;&#x9ED8;&#x8BA4;&#x7528;&#x6237;&#x540D;&#x524D;&#x7F00;
            # &#x82E5;&#x4E0D;&#x8BBE;&#x7F6E;&#xFF0C;&#x9664;email&#x5916;&#x7684;&#x6240;&#x6709;&#x7528;&#x6237;&#x540D;&#x5C06;&#x9ED8;&#x8BA4;&#x4EE5;issuer URL&#x5F00;&#x5934;&#x4EE5;&#x907F;&#x514D;&#x51B2;&#x7A81;
            # &#x82E5;&#x8BBE;&#x7F6E;&#x4E3A;&apos;-&apos;&#xFF0C;&#x5C06;&#x53D6;&#x6D88;&#x6240;&#x6709;&#x9ED8;&#x8BA4;&#x524D;&#x7F00;
  --requestheader-allowed-names strings                                                                                                            
            List of client certificate common names to allow to provide usernames in headers specified by --requestheader-username-headers. If empty,
            any client certificate validated by the authorities in --requestheader-client-ca-file is allowed.
            # &#x5BA2;&#x6237;&#x7AEF;&#x8BC1;&#x4E66;&#x7684;common names&#x5217;&#x8868;&#xFF0C;--requestheader-username-headers&#x53C2;&#x6570;&#x4E2D;&#x6307;&#x5B9A;&#x53EF;&#x7528;&#x7684;&#x7528;&#x6237;&#x540D;
            # &#x82E5;&#x4E3A;&#x7A7A;&#xFF0C;&#x5C06;&#x5141;&#x8BB8;&#x6240;&#x6709;&#x53EF;&#x88AB;--requestheader-client-ca-file&#x4E2D;ca&#x9A8C;&#x8BC1;&#x7684;&#x5BA2;&#x6237;&#x7AEF;&#x8BC1;&#x4E66;
  --requestheader-client-ca-file string                                                                                                            
            Root certificate bundle to use to verify client certificates on incoming requests before trusting usernames in headers specified by
            --requestheader-username-headers. WARNING: generally do not depend on authorization being already done for incoming requests.
            # &#x5728;&#x4FE1;&#x4EFB;--requestheader-username-headers&#x53C2;&#x6570;&#x4E2D;&#x6307;&#x5B9A;&#x7684;username&#x4E4B;&#x524D;&#xFF0C;&#x7528;&#x6765;&#x9A8C;&#x8BC1;&#x5BA2;&#x6237;&#x7AEF;&#x8BC1;&#x4E66;&#x7684;&#x4F20;&#x5165;&#x8BF7;&#x6C42;&#x7684;ca&#x6587;&#x4EF6;&#x3002;
            # &#x4E00;&#x822C;&#x4E0D;&#x4F9D;&#x8D56;&#x4E8E;&#x5DF2;&#x9A8C;&#x8BC1;&#x8FC7;&#x7684;&#x4F20;&#x5165;&#x8BF7;&#x6C42;
  --requestheader-extra-headers-prefix strings                                                                                                     
            List of request header prefixes to inspect. X-Remote-Extra- is suggested.
            # &#x9700;&#x6CE8;&#x5165;&#x5230;&#x8BF7;&#x6C42;&#x5934;&#x7684;&#x524D;&#x7F00;
            # &#x5EFA;&#x8BAE;&#x8BBE;&#x4E3A;X-Remote-Extra-
  --requestheader-group-headers strings                                                                                                            
            List of request headers to inspect for groups. X-Remote-Group is suggested.
            # &#x9700;&#x6CE8;&#x5165;&#x5230;&#x8BF7;&#x6C42;&#x5934;&#x4E2D;&#x7684;Group&#x524D;&#x7F00;
            # &#x5EFA;&#x8BAE;&#x8BBE;&#x4E3A;X-Remote-Group
  --requestheader-username-headers strings                                                                                                         
            List of request headers to inspect for usernames. X-Remote-User is common.
            # &#x9700;&#x6CE8;&#x5165;&#x5230;&#x8BF7;&#x6C42;&#x5934;&#x4E2D;&#x7684;username&#x524D;&#x7F00;
            # &#x4E00;&#x822C;&#x4E3A;X-Remote-User
  --service-account-issuer string                                                                                                                  
            Identifier of the service account token issuer. The issuer will assert this identifier in &quot;iss&quot; claim of issued tokens. This value is a
            string or URI.
            # &#x6307;&#x5B9A;service account token issuer&#x7684;&#x6807;&#x8BC6;&#x7B26;
            # &#x8BE5;issuer&#x5C06;&#x5728;iss&#x58F0;&#x660E;&#x4E2D;&#x5206;&#x53D1;Token&#x4EE5;&#x4F7F;&#x6807;&#x8BC6;&#x7B26;&#x751F;&#x6548;
            # &#x8BE5;&#x53C2;&#x6570;&#x7684;&#x503C;&#x4E3A;&#x5B57;&#x7B26;&#x4E32;&#x6216;URL
  --service-account-key-file stringArray                                                                                                           
            File containing PEM-encoded x509 RSA or ECDSA private or public keys, used to verify ServiceAccount tokens. The specified file can contain
            multiple keys, and the flag can be specified multiple times with different files. If unspecified, --tls-private-key-file is used. Must be
            specified when --service-account-signing-key is provided
            # &#x9A8C;&#x8BC1;ServiceAccount Token&#x7684;&#x79C1;&#x94A5;&#x6216;&#x516C;&#x94A5;&#x6587;&#x4EF6;&#xFF0C;&#x4EE5;x509 RSA&#x6216;ECDSA PEM&#x7F16;&#x7801;
            # &#x6307;&#x5B9A;&#x7684;&#x6587;&#x4EF6;&#x53EF;&#x4EE5;&#x5305;&#x542B;&#x591A;&#x4E2A;key
            # &#x53EF;&#x4EE5;&#x591A;&#x6B21;&#x8BBE;&#x7F6E;&#x8BE5;&#x53C2;&#x6570;&#x4EE5;&#x6307;&#x5B9A;&#x4E0D;&#x540C;&#x7684;&#x6587;&#x4EF6;
            # &#x82E5;&#x672A;&#x8BBE;&#x7F6E;&#xFF0C;&#x5C06;&#x4F7F;&#x7528;--tls-private-key-file
            # &#x5F53;&#x8BBE;&#x7F6E;&#x4E86;--service-account-signing-key&#x53C2;&#x6570;&#x65F6;&#xFF0C;&#x5FC5;&#x987B;&#x8BBE;&#x7F6E;&#x8BE5;&#x53C2;&#x6570;
  --service-account-lookup                                                                                                                         
            If true, validate ServiceAccount tokens exist in etcd as part of authentication. (default true)
            # &#x82E5;true&#xFF0C;&#x5C06;&#x9A8C;&#x8BC1;etcd&#x4E2D;&#x662F;&#x5426;&#x5B58;&#x5728;&#x5BF9;&#x5E94;&#x7684;ServiceAccount Token&#x4F5C;&#x4E3A;&#x8BA4;&#x8BC1;&#x7684;&#x4E00;&#x90E8;&#x5206;
            # &#x9ED8;&#x8BA4;&#x503C;&#x4E3A;true
  --service-account-max-token-expiration duration                                                                                                  
            The maximum validity duration of a token created by the service account token issuer. If an otherwise valid TokenRequest with a validity
            duration larger than this value is requested, a token will be issued with a validity duration of this value.
            # service account token issuer&#x521B;&#x5EFA;&#x7684;token&#x7684;&#x6700;&#x5927;&#x6709;&#x6548;&#x903E;&#x671F;&#x65F6;&#x95F4;
            # &#x5F53;&#x6709;&#x4EE5;&#x5176;&#x4ED6;&#x5F62;&#x5F0F;&#x521B;&#x5EFA;&#x7684;TokenRequest&#xFF0C;&#x903E;&#x671F;&#x65F6;&#x95F4;&#x8D85;&#x8FC7;&#x8BE5;&#x503C;&#xFF0C;&#x6B64;token&#x7684;&#x6709;&#x6548;&#x903E;&#x671F;&#x65F6;&#x95F4;&#x5C06;&#x88AB;&#x8BBE;&#x4E3A;&#x8BE5;&#x503C;
  --token-auth-file string                                                                                                                         
            If set, the file that will be used to secure the secure port of the API server via token authentication.
            # &#x82E5;&#x8BBE;&#x7F6E;&#xFF0C;token authentication&#x5C06;&#x4F7F;&#x7528;&#x6307;&#x5B9A;&#x7684;&#x6587;&#x4EF6;&#x52A0;&#x5BC6;API server&#x7684;&#x52A0;&#x5BC6;&#x7AEF;&#x53E3;
</code></pre><p>Authorization flags:</p>
<pre class="language-"><code>  --authorization-mode strings                                                                                                                     
            Ordered list of plug-ins to do authorization on secure port. Comma-delimited list of: AlwaysAllow,AlwaysDeny,ABAC,Webhook,RBAC,Node.
            (default [AlwaysAllow])
            # &#x901A;&#x8FC7;&#x5B89;&#x5168;&#x7AEF;&#x53E3;&#x8BA4;&#x8BC1;&#x6A21;&#x5F0F;&#x7684;&#x63D2;&#x4EF6;&#x5217;&#x8868;
            # &#x9ED8;&#x8BA4;&#x503C;AlwaysAllow
            # &#x73B0;&#x6709;&#x5217;&#x8868;&#xFF08;&#x4EE5;&#x9017;&#x53F7;&#x5206;&#x9694;&#xFF09;&#xFF1A;AlwaysAllow,AlwaysDeny,ABAC,Webhook,RBAC,Node
  --authorization-policy-file string                                                                                                               
            File with authorization policy in json line by line format, used with --authorization-mode=ABAC, on the secure port.
            # authorization-policy&#x914D;&#x7F6E;&#x6587;&#x4EF6;&#xFF08;json line by line&#x683C;&#x5F0F;&#xFF09;
            # --authorization-mode=ABAC&#x4E14;&#x5728;&#x5B89;&#x5168;&#x7AEF;&#x53E3;&#x4E0A;&#x65F6;&#x9700;&#x8BBE;&#x7F6E;
  --authorization-webhook-cache-authorized-ttl duration                                                                                            
            The duration to cache &apos;authorized&apos; responses from the webhook authorizer. (default 5m0s)
            # &#x7F13;&#x5B58;&#x6765;&#x81EA;webhook&#x8BA4;&#x8BC1;&#x5668;&apos;authorized&apos;&#x54CD;&#x5E94;&#x7684;&#x6301;&#x7EED;&#x65F6;&#x95F4;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;5m0s
  --authorization-webhook-cache-unauthorized-ttl duration                                                                                          
            The duration to cache &apos;unauthorized&apos; responses from the webhook authorizer. (default 30s)
            # &#x7F13;&#x5B58;&#x6765;&#x81EA;webhook&#x8BA4;&#x8BC1;&#x5668;&apos;unauthorized&apos;&#x54CD;&#x5E94;&#x7684;&#x6301;&#x7EED;&#x65F6;&#x95F4;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;30s
  --authorization-webhook-config-file string                                                                                                       
            File with webhook configuration in kubeconfig format, used with --authorization-mode=Webhook. The API server will query the remote service
            to determine access on the API server&apos;s secure port.
            # webhook&#x8BA4;&#x8BC1;&#x7684;&#x914D;&#x7F6E;&#x6587;&#x4EF6;&#x8DEF;&#x5F84;&#xFF08;kubeconfig&#x683C;&#x5F0F;&#xFF09;
            # --authorization-mode=Webhook&#x65F6;&#x9700;&#x8BBE;&#x7F6E;
            # API server&#x5C06;&#x67E5;&#x8BE2;&#x8FDC;&#x7A0B;&#x670D;&#x52A1;&#x4EE5;&#x786E;&#x8BA4;API server&#x5B89;&#x5168;&#x7AEF;&#x53E3;&#x7684;&#x4F7F;&#x7528;&#x6743;&#x9650;
</code></pre><p>Cloud provider flags:</p>
<pre class="language-"><code>  --cloud-config string                                                                                                                            
            The path to the cloud provider configuration file. Empty string for no configuration file.
            # &#x4E91;&#x670D;&#x52A1;&#x5546;&#x914D;&#x7F6E;&#x6587;&#x4EF6;
  --cloud-provider string                                                                                                                          
            The provider for cloud services. Empty string for no provider.
            # &#x4E91;&#x670D;&#x52A1;&#x5546;
</code></pre><p>Api enablement flags:</p>
<pre class="language-"><code>  --runtime-config mapStringString                                                                                                                 
            A set of key=value pairs that describe runtime configuration that may be passed to apiserver. <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>group</span><span class="token punctuation">&gt;</span></span>/<span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>version</span><span class="token punctuation">&gt;</span></span> (or <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>version</span><span class="token punctuation">&gt;</span></span> for the core
            group) key can be used to turn on/off specific api versions. api/all is special key to control all api versions, be careful setting it
            false, unless you know what you do. api/legacy is deprecated, we will remove it in the future, so stop using it.
            # &#x4EE5;&#x952E;&#x503C;&#x5BF9;&#x5F62;&#x5F0F;&#x5F00;&#x542F;&#x6216;&#x5173;&#x95ED;&#x5185;&#x5EFA;&#x7684;APIs
            # &#x652F;&#x6301;&#x7684;&#x9009;&#x9879;&#x5982;&#x4E0B;&#xFF1A;
            v1=true|false for the core API group
            <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>group</span><span class="token punctuation">&gt;</span></span>/<span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>version</span><span class="token punctuation">&gt;</span></span>=true|false for a specific API group and version (e.g. apps/v1=true)
            api/all=true|false controls all API versions
            api/ga=true|false controls all API versions of the form v[0-9]+
            api/beta=true|false controls all API versions of the form v[0-9]+beta[0-9]+
            api/alpha=true|false controls all API versions of the form v[0-9]+alpha[0-9]+
            api/legacy &#x5DF2;&#x5E9F;&#x5F03;&#xFF0C;&#x5C06;&#x5728;&#x672A;&#x6765;&#x7248;&#x672C;&#x4E2D;&#x79FB;&#x9664;
</code></pre><p>Admission flags:</p>
<pre class="language-"><code>  --admission-control strings                                                                                                                      
            Admission is divided into two phases. In the first phase, only mutating admission plugins run. In the second phase, only validating
            admission plugins run. The names in the below list may represent a validating plugin, a mutating plugin, or both. The order of plugins in
            which they are passed to this flag does not matter. Comma-delimited list of: AlwaysAdmit, AlwaysDeny, AlwaysPullImages,
            DefaultStorageClass, DefaultTolerationSeconds, DenyEscalatingExec, DenyExecOnPrivileged, EventRateLimit, ExtendedResourceToleration,
            ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists,
            NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel,
            PodNodeSelector, PodPreset, PodSecurityPolicy, PodTolerationRestriction, Priority, ResourceQuota, SecurityContextDeny, ServiceAccount,
            StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionWebhook. (DEPRECATED: Use --enable-admission-plugins or
            --disable-admission-plugins instead. Will be removed in a future version.)
            # &#x5FC5;&#x987B;&#x5173;&#x95ED;&#x7684;admission&#x63D2;&#x4EF6;&#x5217;&#x8868;&#xFF08;&#x5373;&#x4F7F;&#x5DF2;&#x9ED8;&#x8BA4;&#x5F00;&#x542F;&#xFF09;
            # &#x9ED8;&#x8BA4;&#x5F00;&#x542F;&#x7684;&#x63D2;&#x4EF6;&#x5217;&#x8868;&#xFF1A;NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, RuntimeClass, ResourceQuota
            # &#x53EF;&#x5173;&#x95ED;&#x7684;&#x63D2;&#x4EF6;&#x5217;&#x8868;&#xFF08;&#x4EE5;&#x9017;&#x53F7;&#x9694;&#x5F00;&#xFF0C;&#x6392;&#x540D;&#x4E0D;&#x5206;&#x5148;&#x540E;&#xFF09;&#xFF1A;AlwaysAdmit, AlwaysDeny, AlwaysPullImages, DefaultStorageClass, DefaultTolerationSeconds,.....
            # &#x6307;&#x5B9A;admission control configuration&#x6587;&#x4EF6;&#x7684;&#x8DEF;&#x5F84;
  --disable-admission-plugins strings                                                                                                              
            admission plugins that should be disabled although they are in the default enabled plugins list (NamespaceLifecycle, LimitRanger,
            ServiceAccount, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection,
            PersistentVolumeClaimResize, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, ResourceQuota). Comma-delimited list of admission
            plugins: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, DefaultStorageClass, DefaultTolerationSeconds, DenyEscalatingExec,
            DenyExecOnPrivileged, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger,
            MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction,
            OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodPreset, PodSecurityPolicy,
            PodTolerationRestriction, Priority, ResourceQuota, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection,
            TaintNodesByCondition, ValidatingAdmissionWebhook. The order of plugins in this flag does not matter.
            # &#x53BB;&#x6FC0;&#x6D3B;&#x63D2;&#x4EF6;
  --enable-admission-plugins strings                                                                                                               
            admission plugins that should be enabled in addition to default enabled ones (NamespaceLifecycle, LimitRanger, ServiceAccount,
            TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize,
            MutatingAdmissionWebhook, ValidatingAdmissionWebhook, ResourceQuota). Comma-delimited list of admission plugins: AlwaysAdmit, AlwaysDeny,
            AlwaysPullImages, DefaultStorageClass, DefaultTolerationSeconds, DenyEscalatingExec, DenyExecOnPrivileged, EventRateLimit,
            ExtendedResourceToleration, ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook,
            NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement,
            PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodPreset, PodSecurityPolicy, PodTolerationRestriction, Priority,
            ResourceQuota, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionWebhook. The
            order of plugins in this flag does not matter.
            # &#x6FC0;&#x6D3B;&#x63D2;&#x4EF6;
</code></pre><p>Misc flags:</p>
<pre class="language-"><code>  --allow-privileged                                                                                                                               
            If true, allow privileged containers. [default=false]
            # &#x662F;&#x5426;&#x5141;&#x8BB8;&#x7279;&#x6743;&#x5BB9;&#x5668;&#xFF08;privileged container&#xFF09;&#xFF0C;&#x9ED8;&#x8BA4;false
  --apiserver-count int                                                                                                                            
            The number of apiservers running in the cluster, must be a positive number. (In use when --endpoint-reconciler-type=master-count is
            enabled.) (default 1)
            # endpoint reconciler&#x6A21;&#x5F0F;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;lease
            # &#x53EF;&#x7528;&#x6A21;&#x5F0F;&#xFF1A;master-count, lease, none
  --enable-aggregator-routing                                                                                                                      
            Turns on aggregator routing requests to endpoints IP rather than cluster IP.
            # &#x662F;&#x5426;&#x542F;&#x7528;aggregator routing&#x8BF7;&#x6C42;&#x5230;endpoints IP&#x800C;&#x975E;&#x96C6;&#x7FA4;IP
  --endpoint-reconciler-type string                                                                                                                
            Use an endpoint reconciler (master-count, lease, none) (default &quot;lease&quot;)
  --event-ttl duration                                                                                                                             
            Amount of time to retain events. (default 1h0m0s)
            # events&#x7684;&#x4FDD;&#x7559;&#x65F6;&#x95F4;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;1h0m0s
  --kubelet-certificate-authority string                                                                                                           
            Path to a cert file for the certificate authority.
            # kubelet certificate authority&#x7684;cert&#x6587;&#x4EF6;&#x8DEF;&#x5F84;
  --kubelet-client-certificate string                                                                                                              
            Path to a client cert file for TLS.
            # &#x5BA2;&#x6237;&#x7AEF;&#xFF08;kubelet&#xFF09;TLS&#x901A;&#x8BAF;&#x7684;cert&#x6587;&#x4EF6;&#x8DEF;&#x5F84;
  --kubelet-client-key string                                                                                                                      
            Path to a client key file for TLS.
            # &#x5BA2;&#x6237;&#x7AEF;&#xFF08;kubelet&#xFF09;TLS&#x901A;&#x8BAF;&#x7684;key&#x6587;&#x4EF6;&#x8DEF;&#x5F84;
  --kubelet-https                                                                                                                                  
            Use https for kubelet connections. (default true)
            # &#x662F;&#x5426;&#x542F;&#x7528;kubelet&#x7684;https&#x94FE;&#x63A5;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;true
  --kubelet-preferred-address-types strings                                                                                                        
            List of the preferred NodeAddressTypes to use for kubelet connections. (default [Hostname,InternalDNS,InternalIP,ExternalDNS,ExternalIP])
            # kubelet&#x8FDE;&#x63A5;&#x7684;NodeAddressType&#x4F18;&#x5148;&#x7EA7;&#x5217;&#x8868;&#xFF08;&#x4F18;&#x5148;&#x8BBF;&#x95EE;&#x54EA;&#x4E2A;&#x5730;&#x5740;&#xFF09;
            # &#x9ED8;&#x8BA4;&#x503C;&#x4E3A;Hostname,InternalDNS,InternalIP,ExternalDNS,ExternalI
  --kubelet-read-only-port uint                                                                                                                    
            DEPRECATED: kubelet port. (default 10255)
  --kubelet-timeout duration                                                                                                                       
            Timeout for kubelet operations. (default 5s)
            # kubelet&#x64CD;&#x4F5C;&#x7684;&#x8D85;&#x65F6;&#x65F6;&#x95F4;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;5s
  --kubernetes-service-node-port int                                                                                                               
            If non-zero, the Kubernetes master service (which apiserver creates/maintains) will be of type NodePort, using this as the value of the
            port. If zero, the Kubernetes master service will be of type ClusterIP.
            # &#x82E5;&#x4E0D;&#x4E3A;0&#xFF0C;kubernetes master service(apiserver&#x6240;&#x5728;&#x4E3B;&#x673A;)&#x5C06;&#x4EE5;NodePort&#x5F62;&#x5F0F;&#x66B4;&#x9732;&#xFF08;&#x4F7F;&#x7528;&#x8BE5;&#x503C;&#x4E3A;&#x7AEF;&#x53E3;&#x53F7;&#xFF09;
            # &#x82E5;&#x4E3A;0&#xFF0C;kubernetes master service&#x5C06;&#x4EE5;ClusterIP&#x5F62;&#x5F0F;&#x66B4;&#x9732;
  --max-connection-bytes-per-sec int                                                                                                               
            If non-zero, throttle each user connection to this number of bytes/sec. Currently only applies to long-running requests.
  --proxy-client-cert-file string                                                                                                                  
            Client certificate used to prove the identity of the aggregator or kube-apiserver when it must call out during a request. This includes
            proxying requests to a user api-server and calling out to webhook admission plugins. It is expected that this cert includes a signature
            from the CA in the --requestheader-client-ca-file flag. That CA is published in the &apos;extension-apiserver-authentication&apos; configmap in the
            kube-system namespace. Components receiving calls from kube-aggregator should use that CA to perform their half of the mutual TLS verification.
            # &#x5BA2;&#x6237;&#x7AEF;&#x4EE3;&#x7406;&#x7684;cert&#x6587;&#x4EF6;&#x8DEF;&#x5F84;
            # &#x5F53;&#x9700;&#x8981;&#x5728;&#x8BF7;&#x6C42;&#x4E2D;&#x8C03;&#x7528;aggregator&#x6216;kube-apiserver&#x65F6;&#x4F7F;&#x7528;
            # &#x5305;&#x62EC;&#x4EE3;&#x7406;&#x8BF7;&#x6C42;&#x5230;api-server&#x7528;&#x6237;&#x548C;&#x8C03;&#x7528;webhook admission&#x63D2;&#x4EF6;
            # &#x8BE5;cert&#x6587;&#x4EF6;&#x5FC5;&#x987B;&#x5305;&#x542B;--requestheader-client-ca-file&#x53C2;&#x6570;&#x4E2D;&#x6307;&#x5B9A;&#x7684;CA&#x7B7E;&#x540D;&#xFF0C;&#x8BE5;CA&#x7B7E;&#x540D;&#x4FDD;&#x5B58;&#x5728;kube-system namespace&#x4E0B;&#x7684;&#x2018;extension-apiserver-authentication&#x2019; configmap&#x4E2D;
            # &#x5F53;kube-aggregator&#x8C03;&#x7528;&#x5176;&#x4ED6;&#x7EC4;&#x4EF6;&#x65F6;&#xFF0C;&#x6B64;CA&#x7B7E;&#x540D;&#x63D0;&#x4F9B;&#x4E00;&#x534A;&#x7684;TLS&#x76F8;&#x4E92;&#x8EAB;&#x4EFD;&#x9A8C;&#x8BC1;&#x4FE1;&#x606F;&#xFF08;half of the mutual TLS verfication&#xFF09;
  --proxy-client-key-file string                                                                                                                   
            Private key for the client certificate used to prove the identity of the aggregator or kube-apiserver when it must call out during a
            request. This includes proxying requests to a user api-server and calling out to webhook admission plugins.
            # &#x5BA2;&#x6237;&#x7AEF;&#x4EE3;&#x7406;&#x7684;&#x79C1;&#x94A5;&#x6587;&#x4EF6;
            # &#x5F53;&#x9700;&#x8981;&#x5728;&#x8BF7;&#x6C42;&#x4E2D;&#x8C03;&#x7528;aggregator&#x6216;kube-apiserver&#x65F6;&#x4F7F;&#x7528;
            # &#x5305;&#x62EC;&#x4EE3;&#x7406;&#x8BF7;&#x6C42;&#x5230;api-server&#x7528;&#x6237;&#x548C;&#x8C03;&#x7528;webhook admission&#x63D2;&#x4EF6;
  --service-account-signing-key-file string                                                                                                        
            Path to the file that contains the current private key of the service account token issuer. The issuer will sign issued ID tokens with
            this private key. (Requires the &apos;TokenRequest&apos; feature gate.)
            # &#x542B;&#x6709;&#x5F53;&#x524D;service account token issuer&#x79C1;&#x94A5;&#x7684;&#x6587;&#x4EF6;&#x8DEF;&#x5F84;
            # &#x8BE5;issuer&#x5C06;&#x4EE5;&#x6B64;&#x79C1;&#x94A5;&#x7B7E;&#x540D;&#x53D1;&#x5E03;&#x7684;ID token&#xFF08;&#x9700;&#x5F00;&#x542F;TokenRequest&#x7279;&#x6027;&#xFF09;
  --service-cluster-ip-range ipNet                                                                                                                 
            A CIDR notation IP range from which to assign service cluster IPs. This must not overlap with any IP ranges assigned to nodes for pods.
            (default 10.0.0.0/24)
            # &#x4EE5;CIDR&#x683C;&#x5F0F;&#x58F0;&#x660E;&#x53EF;&#x5206;&#x914D;&#x7684;&#x96C6;&#x7FA4;&#x670D;&#x52A1;IP&#x8303;&#x56F4;&#xFF0C;&#x4E0D;&#x53EF;&#x4E0E;&#x5206;&#x914D;Pods&#x7684;nodes IP&#x5730;&#x5740;&#x8303;&#x56F4;&#x91CD;&#x53E0;
  --service-node-port-range portRange                                                                                                              
            A port range to reserve for services with NodePort visibility. Example: &apos;30000-32767&apos;. Inclusive at both ends of the range. (default
            30000-32767)
            # &#x4FDD;&#x7559;&#x7684;&#x4EE5;NodePort&#x7C7B;&#x578B;&#x66B4;&#x9732;&#x7684;&#x670D;&#x52A1;&#x7684;&#x7AEF;&#x53E3;&#x8303;&#x56F4;&#xFF0C;&#x9ED8;&#x8BA4;&#x503C;&#x4E3A;30000-32767&#xFF0C;&#x5DE6;&#x95ED;&#x53F3;&#x95ED;
</code></pre><footer class="page-footer"><span class="copyright">Copyright &#xA9; caixisheng 2017 all right reserved&#xFF0C;powered by Gitbook</span><span class="footer-modification">&#x8BE5;&#x6587;&#x4EF6;&#x4FEE;&#x8BA2;&#x65F6;&#x95F4;&#xFF1A;
2020-07-29 18:28:48
</span></footer> <link rel="stylesheet" type="text/css" href="https://storage.googleapis.com/app.klipse.tech/css/codemirror.css"> <script>     window.klipse_settings = {         selector: ".language-klipse, .lang-eval-clojure",         selector_eval_js: ".lang-eval-js",         selector_eval_python_client: ".lang-eval-python",         selector_eval_php: ".lang-eval-php",         selector_eval_scheme: ".lang-eval-scheme",         selector_eval_ruby: ".lang-eval-ruby",         selector_reagent: ".lang-reagent",        selector_google_charts: ".lang-google-chart",        selector_es2017: ".lang-eval-es2017",        selector_jsx: ".lang-eval-jsx",        selector_transpile_jsx: ".lang-transpile-jsx",        selector_render_jsx: ".lang-render-jsx",        selector_react: ".lang-react",        selector_eval_markdown: ".lang-render-markdown",        selector_eval_lambdaway: ".lang-render-lambdaway",        selector_eval_cpp: ".lang-eval-cpp",        selector_eval_html: ".lang-render-html",        selector_sql: ".lang-eval-sql",        selector_brainfuck: "lang-eval-brainfuck",        selector_js: ".lang-transpile-cljs"    }; </script> <script src="https://storage.googleapis.com/app.klipse.tech/plugin/js/klipse_plugin.js"></script>
                                
                                </section>
                            
    </div>
    <div class="search-results">
        <div class="has-results">
            
            <h1 class="search-results-title"><span class='search-results-count'></span> results matching "<span class='search-query'></span>"</h1>
            <ul class="search-results-list"></ul>
            
        </div>
        <div class="no-results">
            
            <h1 class="search-results-title">No results matching "<span class='search-query'></span>"</h1>
            
        </div>
    </div>
</div>

                        </div>
                    </div>
                
            </div>

            
                
                
                <a href="kubernetes-client.html" class="navigation navigation-next navigation-unique" aria-label="Next page: Kubernetes Client">
                    <i class="fa fa-angle-right"></i>
                </a>
                
            
        
    </div>

    <script>
        var gitbook = gitbook || [];
        gitbook.push(function() {
            gitbook.page.hasChanged({"page":{"title":"Kuber Apiserver Flag","date":"2020-06-28T08:10:09.000Z","draft":false,"level":"1.9.21","depth":2,"next":{"title":"Kubernetes Client","level":"1.9.22","depth":2,"path":"blog/kubernetes/kubernetes-client.md","ref":"blog/kubernetes/kubernetes-client.md","articles":[]},"previous":{"title":"KubeEdge","level":"1.9.20","depth":2,"ref":"","articles":[]},"dir":"ltr"},"config":{"plugins":["summary","expandable-chapters","toggle-chapters","theme-comscore","-lunr","-search","-highlight","-livereload","search-plus@^0.0.11","simple-page-toc@^0.1.1","github@^2.0.0","github-buttons@2.1.0","edit-link@^2.0.2","disqus@^0.1.0","prism@^2.1.0","prism-themes@^0.0.2","advanced-emoji@^0.2.1","anchors@^0.7.1","include-codeblock@^3.0.2","emphasize@^1.1.0","katex@^1.1.3","splitter@^0.0.8","mermaid-gb3@2.1.0","tbfed-pagefooter@^0.0.1","expandable-chapters-small@^0.1.7","sectionx@^3.1.0","donate@^1.0.2","local-video@^1.0.1","anchor-navigation-ex@0.1.8","favicon@^0.0.2","3-ba@^0.9.0","terminal@^0.3.2","alerts@^0.2.0","include-csv@^0.1.0","puml@^1.0.1","musicxml@^1.0.2","klipse@^1.2.0","versions-select@^0.1.1","-sharing","sharing-plus@^0.0.2","graph@^0.1.0","chart@^0.2.0"],"root":".","styles":{"website":"styles/website.css","pdf":"styles/pdf.css","epub":"styles/epub.css","mobi":"styles/mobi.css","ebook":"styles/ebook.css","print":"styles/print.css"},"pluginsConfig":{"tbfed-pagefooter":{"copyright":"Copyright © caixisheng 2017","modify_label":"该文件修订时间：","modify_format":"YYYY-MM-DD HH:mm:ss"},"prism":{"css":["prism-themes/themes/prism-base16-ateliersulphurpool.light.css"]},"include-csv":{},"disqus":{"useIdentifier":false,"shortName":"gitbookuse"},"emphasize":{},"github":{"url":"https://github.com/xishengcai/xisheng.blog"},"puml":{},"simple-page-toc":{"maxDepth":3,"skipFirstH1":true},"summary":{},"splitter":{},"sharing-plus":{"qq":false,"all":["facebook","google","twitter","instapaper","linkedin","pocket","stumbleupon"],"douban":false,"facebook":true,"weibo":false,"instapaper":false,"whatsapp":false,"hatenaBookmark":false,"twitter":true,"messenger":false,"line":false,"vk":false,"pocket":true,"google":false,"viber":false,"stumbleupon":false,"qzone":false,"linkedin":false},"versions-select":{"type":"branches"},"graph":{},"donate":{"alipay":"https://cai-hello-1253732611.cos.ap-shanghai.myqcloud.com/share/zhifubao-pay.jpg","alipayText":"支付宝打赏","button":"赏","title":"","wechat":"https://cai-hello-1253732611.cos.ap-shanghai.myqcloud.com/share/weixin-pay.jpg","wechatText":"微信打赏"},"katex":{},"fontsettings":{"theme":"white","family":"sans","size":2},"musicxml":{},"sectionx":{"tag":"b"},"mermaid-gb3":{},"anchor-navigation-ex":{"isRewritePageTitle":false,"tocLevel1Icon":"fa fa-hand-o-right","tocLevel2Icon":"fa fa-hand-o-right","tocLevel3Icon":"fa fa-hand-o-right"},"favicon":{"shortcut":"favicon.ico","bookmark":"favicon.ico"},"theme-comscore":{},"prism-themes":{},"alerts":{},"github-buttons":{"repo":"xishengcai/xisheng.blog","types":["star"],"size":"small"},"3-ba":{"configuration":"auto","token":"ff100361cdce95dd4c8fb96b4009f7bc"},"expandable-chapters-small":{},"local-video":{},"klipse":{"myConfigKey":"it's the default value"},"advanced-emoji":{"embedEmojis":false},"include-codeblock":{"check":false,"edit":true,"fixlang":false,"lang":"","template":"ace","theme":"chrome","unindent":true},"sharing":{"qq":false,"all":["facebook","google","twitter","weibo","instapaper","linkedin","pocket","stumbleupon","qq","qzone"],"douban":false,"facebook":false,"weibo":true,"instapaper":false,"whatsapp":false,"hatenaBookmark":false,"twitter":false,"messenger":false,"line":false,"vk":false,"pocket":false,"google":true,"viber":false,"stumbleupon":false,"qzone":false,"linkedin":true},"terminal":{"copyButtons":true,"fade":false,"style":"flat"},"edit-link":{"label":"Edit This Page","base":"https://github.com/xishengcai/xisheng.blog/edit/master"},"theme-default":{"styles":{"website":"styles/website.css","pdf":"styles/pdf.css","epub":"styles/epub.css","mobi":"styles/mobi.css","ebook":"styles/ebook.css","print":"styles/print.css"},"showLevel":true},"anchors":{},"chart":{"type":"c3"},"toggle-chapters":{},"expandable-chapters":{},"search-plus":{}},"theme":"default","author":"xishengcai","pdf":{"pageNumbers":true,"fontSize":12,"fontFamily":"Arial","paperSize":"a4","chapterMark":"pagebreak","pageBreaksBefore":"/","margin":{"right":62,"left":62,"top":56,"bottom":56}},"structure":{"langs":"LANGS.md","readme":"README.md","glossary":"GLOSSARY.md","summary":"SUMMARY.md"},"variables":{},"title":"这是程序员吗","language":"zh-hans","output.name":"site","links":{"sidebar":{"Home":"https://xisheng.vip"}},"gitbook":"3.2.3","description":"这是程序员吗"},"file":{"path":"blog/kubernetes/kuber-apiserver-flag.md","mtime":"2020-07-29T10:28:48.982Z","type":"markdown"},"gitbook":{"version":"3.2.3","time":"2021-06-23T07:51:54.455Z"},"basePath":"../..","book":{"language":""}});
        });
    </script>
</div>

        
    
    <script src="../../gitbook/gitbook.js"></script>
    <script src="../../gitbook/theme.js"></script>
    
        
        <script src="../../gitbook/gitbook-plugin-expandable-chapters/expandable-chapters.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-toggle-chapters/toggle.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-search-plus/jquery.mark.min.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-search-plus/search.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-github/plugin.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-github-buttons/plugin.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-edit-link/plugin.js"></script>
        
    
        
        <script src="https://cdnjs.cloudflare.com/ajax/libs/URI.js/1.16.1/URI.min.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-disqus/plugin.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-splitter/splitter.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-mermaid-gb3/book/plugin.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-expandable-chapters-small/expandable-chapters-small.js"></script>
        
    
        
        <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-sectionx/sectionx.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-donate/plugin.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-local-video/video.min.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-3-ba/plugin.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-terminal/plugin.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-alerts/plugin.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-musicxml/osmd.min.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-musicxml/musicxml.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-musicxml/promise.min.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-versions-select/plugin.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-sharing-plus/buttons.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-fontsettings/fontsettings.js"></script>
        
    
        
        <script src="../../gitbook/gitbook-plugin-theme-comscore/test.js"></script>
        
    

    <script src="../../gitbook/gitbook-plugin-mermaid-gb3/mermaid/mermaid.min.js"></script>

    </body>
</html>

